DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Behavioral task
behavioral1
Sample
2d1e4bd859a67e63020c7ea489b0bb04_JaffaCakes118.dll
Resource
win7-20240705-en
Target
2d1e4bd859a67e63020c7ea489b0bb04_JaffaCakes118
Size
7KB
MD5
2d1e4bd859a67e63020c7ea489b0bb04
SHA1
0e12356d2b9a1be76b5461f63fe2d0df1260f9f9
SHA256
0057273cead360eacdc29b157b1c02704fa215944ef45b6fa8476581e7ebd08a
SHA512
cbe322b07c81adc6b5887f5814ed5939238b81c13c7dbecaa56196312eb5f84d206c09b6599cbe3659c506ab020455163cbf2f5af592a00ad4476e242d8cf076
SSDEEP
96:lYuPjwZbINF52YZXyas7W6SzFeIhToh6SXv54I3XrLCU6qvMPHhUDuWDAR6lVMKu:lYuvXEYUaoWRFeIxI6OvCOaUFRsCy
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2d1e4bd859a67e63020c7ea489b0bb04_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ