DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Behavioral task
behavioral1
Sample
1671176ddde9afd575f7ef35501e4f8d_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
1671176ddde9afd575f7ef35501e4f8d_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
1671176ddde9afd575f7ef35501e4f8d_JaffaCakes118
Size
53KB
MD5
1671176ddde9afd575f7ef35501e4f8d
SHA1
3e66c688fa15d31eb1cd9bd6e311241b49bd7263
SHA256
945b55beb5355d065ba881a6ed23956feec0e6bb2cd487056fa87f5b7b5a3780
SHA512
9488187155557410dc6801c8873c613dbc55218071aab266f5fd8c4221227f7b77bc48a7ea4601265cbb8adff22a163e7d414c4e9e0b7da62b77cbd3f4061587
SSDEEP
1536:QtdzXJurc90zeJM+CrmutBKtehLl+flch:sdNhJ98BYeylch
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
1671176ddde9afd575f7ef35501e4f8d_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ