DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Behavioral task
behavioral1
Sample
1ba480452e882bc1ea05557718cce06b_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1ba480452e882bc1ea05557718cce06b_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
1ba480452e882bc1ea05557718cce06b_JaffaCakes118
Size
69KB
MD5
1ba480452e882bc1ea05557718cce06b
SHA1
49454f2e626dde7068a6d96fc188a1ac112d2ca9
SHA256
09fc56584dd55473c01fa19894064aa5cd79399d9af5091c7aacaa0c07c49436
SHA512
72d8124c5f29b058e8790a405ba8641199a304564b3ef8ecbd2eae2ef4e48bc3aa2765ac2a3aebc1628e3196346cdf874e1d6b75ed56ac76bf3001de1e10ae1c
SSDEEP
1536:BMgBv1qLeRqBPcc3E796wnmSRA9weP3Z/cs:agF1qLTBPBENDAdFcs
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
1ba480452e882bc1ea05557718cce06b_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ