DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
06d77ea543304d19ab91e525ffe422f4_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
06d77ea543304d19ab91e525ffe422f4_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
06d77ea543304d19ab91e525ffe422f4_JaffaCakes118
Size
9KB
MD5
06d77ea543304d19ab91e525ffe422f4
SHA1
c6074de20a75cf196e23cdc728825df8591e7a68
SHA256
fc71bcdd58db826719ba9d06e6f691f0642ba5b1e1c8bdec3f2460b3b709c300
SHA512
f08a7559c7eacbc0d9ec259791024c5e62458cc0772b8d2762f77047ad0616894bef2a4c3c9da80d7bc703b94b0e9d356cc0426c296ebf2e69881632f83e52f0
SSDEEP
192:YZ0jXhYOIc1DZfA2USnp3ytihEfQFyXhA:/SOIc1VfA2USnpD2fQ4
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
06d77ea543304d19ab91e525ffe422f4_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ