DllCanReloadNow
DllUnregisterServerA
Behavioral task
behavioral1
Sample
1982401992b98e1c404d604a26b2f97c_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1982401992b98e1c404d604a26b2f97c_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
1982401992b98e1c404d604a26b2f97c_JaffaCakes118
Size
32KB
MD5
1982401992b98e1c404d604a26b2f97c
SHA1
0d0cd9568a5ae7f3692dd74756f4b92c5ec98fac
SHA256
dfde5b323b6e7848089471c47730ac3eab7e9cc8129c15d4d6fbdf4117869e02
SHA512
88cb7b9429cfb07a2585556739ac7cf7d62f0e1684030c63143d8aaf0c4b207c7f9124c6a4f0b81c5e7cffffc5b9fb2380f6bfe7b89de075f8016ea1fea4ea59
SSDEEP
768:uoLWctRPHWIHV+8IFIACFE4PAKVojN6xetWifE2sjg3HBgS:uoLNHWFIRF60ojNWifujghgS
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
1982401992b98e1c404d604a26b2f97c_JaffaCakes118 |
unpack001/out.upx |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanReloadNow
DllUnregisterServerA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ