DllGetClassObject
DllRegisterServer
Behavioral task
behavioral1
Sample
1c87b261deb66ee7e4739981aad9d4b0_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1c87b261deb66ee7e4739981aad9d4b0_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
1c87b261deb66ee7e4739981aad9d4b0_JaffaCakes118
Size
65KB
MD5
1c87b261deb66ee7e4739981aad9d4b0
SHA1
4255efb00de8eae8c1fdfd9fb14cff69795b03f9
SHA256
ac1162cae3828f4dc9977177afba4b92a5a45a1ed43a0248dce8d57d472d1a47
SHA512
343fe7479ab42aa1231065905e1b8a3009427fa5a6950609c6777a4578808046f4241fe8ed38a06f559acfe6b22dc3ba5b439f2e336ab5dc6162432682e2a8d5
SSDEEP
1536:O8r3XH93fMXB5/KPAA1l2Tq3s6ecDKdCrzsFykj:VrGXB5sAA2N6B20Uj
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
1c87b261deb66ee7e4739981aad9d4b0_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ