DllGetClassObject
DllRegisterServer
Behavioral task
behavioral1
Sample
260b0aedb64fc072d8c4908349d17b66_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
260b0aedb64fc072d8c4908349d17b66_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
260b0aedb64fc072d8c4908349d17b66_JaffaCakes118
Size
58KB
MD5
260b0aedb64fc072d8c4908349d17b66
SHA1
be1484e8373aba887a7e68a4bf0986906f6d6393
SHA256
e3d072038f9d7283ef2e5b2ccc8c2981e0af31b6459b8398558d2fe851784fa5
SHA512
66e8a99b1b071a7d60f8d652b9826038f37640b5e59a4c1ac2ff8db8ff07d258343e91ba9728c2b6888140571a2269dd447f0c575ecf408a59a5a5dce742e13b
SSDEEP
1536:ZoZllSPevBhXJbSv3PWSND/DCctpQSO5Pq7:Z27fXwvPW+Cc+a
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
260b0aedb64fc072d8c4908349d17b66_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ