DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
29ec9368cb7acd10deabd8dcf048e4b5_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
29ec9368cb7acd10deabd8dcf048e4b5_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
29ec9368cb7acd10deabd8dcf048e4b5_JaffaCakes118
Size
24KB
MD5
29ec9368cb7acd10deabd8dcf048e4b5
SHA1
2492416200d573958895ab64f293f13c57dc7d68
SHA256
030cd5220a22a2c2ccaf402aeb6859f1501d175e38c293e62b278689927936fd
SHA512
1c5a6acac44b1ee1e5b21e2d0acbf5e955700778d0a8f351cd0b137c19e8aaacfbfba3376e09c04c6e2359067ccd5e5aa6abe53755606a4053eb8bc2dca4eb50
SSDEEP
384:WIE1N+ZF+yVEMC7Jh97RZ2oTROzLM03KARwQfF/zQI/3EEHVL:WIkMayKbj97RNYzLMDOJ8u/HVL
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
29ec9368cb7acd10deabd8dcf048e4b5_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ