DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Behavioral task
behavioral1
Sample
247977848908533bbcfe6360ed85d161_JaffaCakes118.dll
Resource
win7-20240508-en
Target
247977848908533bbcfe6360ed85d161_JaffaCakes118
Size
8KB
MD5
247977848908533bbcfe6360ed85d161
SHA1
f84349a5f2e057038600f1eb797e02f7e4ccbcd8
SHA256
ac572c9dfcf5ac349eca813503db76077223ba060805d5cbfd19a039cd71d27c
SHA512
49fe58d51d3c54d4cf4dca9f578942e1f139d842520157ea7b22671a07330e1fffb5d4c69e4d005ad86df14882c73d2cfb349543bd6d47c7294320a2c9edc293
SSDEEP
192:8mx2ORHnY+Ppmzu6euCY7FHVMnVdVOsT0q4evzgI/:8mx2ORHnPkSjuCY7FKnVWp8z
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
247977848908533bbcfe6360ed85d161_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE