DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JSOff
JSOn
Behavioral task
behavioral1
Sample
2bc5abc1d2d8a1848f1eb7b1c6bac069_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2bc5abc1d2d8a1848f1eb7b1c6bac069_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2bc5abc1d2d8a1848f1eb7b1c6bac069_JaffaCakes118
Size
56KB
MD5
2bc5abc1d2d8a1848f1eb7b1c6bac069
SHA1
416004d66f1da2baa1e6be3ad7e4df2a6a44a4b6
SHA256
2663186f5c418da002a691e445d3f80029511767fc8187ae70910f6a8ede292d
SHA512
5eadff13bcc8da47f325985f9dd06154c0cfe90c7743efbff9b15981be03af400b95ad36149a5af79e46bafc177be3dd1eab5db55d19c4d5ca4a02aea165a8f5
SSDEEP
1536:uZLQSpl82Sk8+cb2QkTO5hInL8naGouGV6i/6c0Sk3FrG:eLAdhbuTOnILqaGoDVl6c3kVrG
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2bc5abc1d2d8a1848f1eb7b1c6bac069_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JSOff
JSOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ