DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
09d0afda209189bc26439073de79de19_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
09d0afda209189bc26439073de79de19_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
09d0afda209189bc26439073de79de19_JaffaCakes118
Size
189KB
MD5
09d0afda209189bc26439073de79de19
SHA1
26c1f76ac722b3d65d6f45c27e3cecc70e4916d3
SHA256
19c87040071c87324956411c4ebc5d2a73b04685015936d2f63c1fd55d9b632f
SHA512
b7da52370e4ad55c1095e4b14af2257ac5236f589d8e8adeda0c28dd0799d4a3c4f900855676fab8301e72f986e1a36c61b7e6e65c9b5468ed40fb57fde36117
SSDEEP
3072:MbcxSvyxobRomWCQGGIdmJ61mkQpYCo0ifQD7DhupRgkSBc86IMt2+T1MII:XhmfHpq4pgYCg4DAzgkwcjIMt2qM
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
09d0afda209189bc26439073de79de19_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE