DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Behavioral task
behavioral1
Sample
277a2bba59a0c8fa48ae979c17564dbd_JaffaCakes118.dll
Resource
win7-20240704-en
Target
277a2bba59a0c8fa48ae979c17564dbd_JaffaCakes118
Size
7KB
MD5
277a2bba59a0c8fa48ae979c17564dbd
SHA1
e9a4ae489b119c845a71ab512a4f96a51f37f742
SHA256
76d026df0a509e7ec5b3777ef589ee03f058d1e60c6b430470ae12058ac37f67
SHA512
157ce1b08786befdd73c5119ff55cbb8360f1533d2e12d75812d9e8c3cd5fa056108bf6035bc7f97ec420a2fd4cb04df51bbbabd5f29f0e81e0e037b942fe6fa
SSDEEP
192:mewyb0n6nWNKqn8HazrQx+1P9QFeomhnylJiBlP1:TDVWNzngYrQxcPK9Jq
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
277a2bba59a0c8fa48ae979c17564dbd_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ