DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
150508364db23a82494ee378901947d2_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
150508364db23a82494ee378901947d2_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
150508364db23a82494ee378901947d2_JaffaCakes118
Size
11KB
MD5
150508364db23a82494ee378901947d2
SHA1
4fb429c08d12a5feaa1c75b177185bcd8ac247c0
SHA256
6ea37bc1e51923c67eeb2548d4388059908a467c76e66e9cc7822577e3270c9e
SHA512
3957160c4a46d01402763537f869f1954ed65d6de0e6ccf479d190579c190d15be0b9d5386debc9595fae242cc5a50a0e3e2cdedbf640edc23a5de9810f444d2
SSDEEP
192:bSDhpF+Qo9/m9U37SH6e1aQ1vozM1G+Yi0Y/MWAJzA:4N+QEe9U3mMQ1XG+zz/MWC
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
150508364db23a82494ee378901947d2_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ