DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
2df56a0082519130fe0e7dee17366093_JaffaCakes118.dll
Resource
win7-20240705-en
Target
2df56a0082519130fe0e7dee17366093_JaffaCakes118
Size
228KB
MD5
2df56a0082519130fe0e7dee17366093
SHA1
b60b2313db5cd7e537d2e6da672439196c7effc4
SHA256
066b48992b1de8d9ed4b83337200cd2ea6a3fc1af5a58267d767c7b2f5edda90
SHA512
cce48965f0f51a46af2739e73d95d7d70a95470d7d83d5ec45951d9811683f34a0da365af73f89751c283cd59e0cfe24070eef9077b7dfa0612ef4d9d85adfa7
SSDEEP
6144:aO6qr56/njukd3bfcM9uBcmAUESfGjk56cDxPN:aOBr56buk3bUMVUrR56W
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2df56a0082519130fe0e7dee17366093_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE