DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
2fb5c301424d200b910f0dee32511df6_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2fb5c301424d200b910f0dee32511df6_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2fb5c301424d200b910f0dee32511df6_JaffaCakes118
Size
267KB
MD5
2fb5c301424d200b910f0dee32511df6
SHA1
3972514b7fe232f6da0cce0628bb3d5142816cd7
SHA256
a75c570431b5dc6e097bb8aaa8114e0af7f2f8e571ba6eae2cb82479796656b7
SHA512
52bfe94ad78c7249638aa9ff972012a4809cc92f051fbbfe0948688d850b587d41394304b7804428b2d3b67dd60fe7061a7d1d6d25754f6258ab39517ffa6990
SSDEEP
6144:ifSto5eYjPghWrEh+KFvLhUHCHaC82LGK:ifSCUhA2+Kp6HCHa525
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
2fb5c301424d200b910f0dee32511df6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE