DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
2cb1f8adc259d57d0262b863d216bcf2_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2cb1f8adc259d57d0262b863d216bcf2_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2cb1f8adc259d57d0262b863d216bcf2_JaffaCakes118
Size
247KB
MD5
2cb1f8adc259d57d0262b863d216bcf2
SHA1
2eb9675a45dc64dbe21a382f95dd6a8baab94b89
SHA256
aefd7cdbb5192e6010c90385aa0a7a0df9878565e02edaa58a6de6fd96ba3da3
SHA512
c4d34201acd939513337a35e79bacc657f778e39be8c907465664a92d0aa0a9321b7f25a26a442ac6dbc88b4b2a4b466f8e096e66be4ba4cf34b3fc8493e24e3
SSDEEP
6144:tlCTA6UQCMCYMmrE+hoyrCFut5gbVj1MAMlGe:tKyzYnrE+ho97bVjOAKGe
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
2cb1f8adc259d57d0262b863d216bcf2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE