DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
2604e5ed20f9f1b01542721c7a2e8d10_JaffaCakes118.dll
Resource
win7-20240508-en
Target
2604e5ed20f9f1b01542721c7a2e8d10_JaffaCakes118
Size
232KB
MD5
2604e5ed20f9f1b01542721c7a2e8d10
SHA1
8952bbf74432ac9599f1e586e541eab143644080
SHA256
4534155ebdcc3cc42571e5948bd95c182a8bf98e89b6db9198a88470dfe78364
SHA512
b21edf6512650772b1ed4532089969579bd3a96c9661f6f0c149c500ae63bb6218bcba2f3300d28dbec897fefd7b150066281e8e809e5f1214b5d513ab1cc719
SSDEEP
6144:vahv75iH71UHwTgvOKg+wgUNnmHb1p1ZRSgrq6TPVI:e75ib1UQg2SwgZRZ0v
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2604e5ed20f9f1b01542721c7a2e8d10_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE