DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Behavioral task
behavioral1
Sample
2458450a3aeb77b3ac4cd67a7cbae9cc_JaffaCakes118.dll
Resource
win7-20240611-en
Target
2458450a3aeb77b3ac4cd67a7cbae9cc_JaffaCakes118
Size
10KB
MD5
2458450a3aeb77b3ac4cd67a7cbae9cc
SHA1
3d91cd45fc01a34e8f8ee4dcf53097523ba28a5d
SHA256
aada2e55b6670b854bd7fa14ea6357e278dd74e879a44b80c702dad3127adb75
SHA512
52963b004f99253d8713d5dcc780ceac4c55c178890987de2bf250ca5abe8580cee9cdb5d0c778ee87d9753ee62327cc743a72dedeb3f73e42c8e3a9f7b5b810
SSDEEP
192:VJu5tHgLzAMYDlieie1nNmVu6cNer5xHvfAjFaNJhLkwcud2DH9VwGfctEeN:OHNl5ie14Vu6zrP3ApaNJawcudoD7U
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2458450a3aeb77b3ac4cd67a7cbae9cc_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE