DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
2584a634e7034c93117bf4189f20f2e3_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2584a634e7034c93117bf4189f20f2e3_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
2584a634e7034c93117bf4189f20f2e3_JaffaCakes118
Size
8KB
MD5
2584a634e7034c93117bf4189f20f2e3
SHA1
afc0b6008bd6e03a1abd5aa5b374bf6b97960275
SHA256
91339a6e61d0b7843601271dce8eb4b54f8b40d269c42186f2b760395cc476c0
SHA512
095e63ac46c7f82d15ba176e2bf8e7341fa3f6f8570578baa59d4fbd5bf00e53644e2e870b55224e33d5e611da8a963f5c7f0e5aad8842907d9e1162d6ed1d36
SSDEEP
192:XEv8KIXZruPSiIK5puWqAO3TuZzZdZebHNlanW2pA:0vpcyKQ5qAouZzZdZQNlanW2
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2584a634e7034c93117bf4189f20f2e3_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ