DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
2293f00ebe9368254d687cd12242320a_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2293f00ebe9368254d687cd12242320a_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
2293f00ebe9368254d687cd12242320a_JaffaCakes118
Size
14KB
MD5
2293f00ebe9368254d687cd12242320a
SHA1
cdd9f0a591d1f5a415269d5edd2c59c18d288e7c
SHA256
b51c74f47d0084e7ff36fa35bf376ecda90a8f47cf507800de3cd8267495a5ec
SHA512
530e4d40a09bbeca874c36e865bf04218453785090ec6399f786ae00211a24f79c1c665783fb8aa796fe169e960b2a9e4a4317b35a6d8add5c5b705b0ce20bc6
SSDEEP
192:VvmwjjZEwvjOEwsuo6+GYjh5K+NcPxLpi5wwvU4ntPy4KzS538tNKDi8XCnWAUHo:vj6mbubkjXK95Q5MbmutUXCnWAUHO3Rl
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2293f00ebe9368254d687cd12242320a_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ