DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
2cf0b69d1b21554f635c53502c01f19d_JaffaCakes118.dll
Resource
win7-20240705-en
Target
2cf0b69d1b21554f635c53502c01f19d_JaffaCakes118
Size
417KB
MD5
2cf0b69d1b21554f635c53502c01f19d
SHA1
d68fc954980c9c6c8ed964f116dfbe43fdbeb1a6
SHA256
269ea8c21bd1885d57d16f67c07af9657660c21600bb1670cebaa7cd0e18d2cf
SHA512
73e2d6ba4199a45caa7397ff8351855f996262019ac9722d3daa712d6e5a38cab578a976c3641c7e36700a45d8281345a11927578d6cee2110d1cbe0bd1df55a
SSDEEP
12288:GxsDwHARokNVUh0unqsDDPWwbBnOeSP+7kPvAm+InlDP2dlj:GxBH8hn7sDDPWwb5OhP+Y4INE
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
2cf0b69d1b21554f635c53502c01f19d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE