DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Behavioral task
behavioral1
Sample
08dc2c1869b6d70fc7710a9ca26f6e10_JaffaCakes118.dll
Resource
win7-20231129-en
Target
08dc2c1869b6d70fc7710a9ca26f6e10_JaffaCakes118
Size
7KB
MD5
08dc2c1869b6d70fc7710a9ca26f6e10
SHA1
be8986d1aa6eee4a6e5aa6e73e6529e871a25dba
SHA256
fc2bf181286f6f9d14ba376ab54f60b8b6760bedb620bcb26474b1999a994389
SHA512
08ef41eac8c27dabcf03a9979a9bf800bb3b63bf59d252c4ac0527e8f091da460aa3deb9a835401edf36ca63ea016912d56a380e9cae82dba133af906afbdc5d
SSDEEP
192:luJ9LpHWxIQgVY7sZ8VluMLdmLQVNPs1yXZmgB7LwJ:luJ9FHwFg+sZSuMY8PsMXv1
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
08dc2c1869b6d70fc7710a9ca26f6e10_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ