DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
26860202d42cc14ceed7ba518e5db922_JaffaCakes118.dll
Resource
win7-20240221-en
Target
26860202d42cc14ceed7ba518e5db922_JaffaCakes118
Size
17KB
MD5
26860202d42cc14ceed7ba518e5db922
SHA1
da2f9d31bc5e14146ae23dfb78bac184c5c0f4f8
SHA256
e6cebd483cbef9ea5c52db929735fd3e4d6f97f2c9c21032c8bc6d05fcc06484
SHA512
1395a3170888dada98e86cb4ad0d12f3a68779ee3bddede6e244edfa19b5b2a4fe71601953c8cb39cf811787871ca9fced29dc9502a54ec379256341a42d485e
SSDEEP
192:nr/BQH/M+6H8BWZdeauYqyDX7evf8UGfmnXBsNeMl2C2q+6VD40oQNTevpbGfMCW:nLBs/qcE/JuYq4C38UGpNeBdUDvEP0
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
26860202d42cc14ceed7ba518e5db922_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ