DllGetClassObject
DllRegisterServer
Behavioral task
behavioral1
Sample
312bb7bdf7ce0d78e941791e059eefe2_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
312bb7bdf7ce0d78e941791e059eefe2_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
312bb7bdf7ce0d78e941791e059eefe2_JaffaCakes118
Size
50KB
MD5
312bb7bdf7ce0d78e941791e059eefe2
SHA1
e52436d22a23d24aad110533b257a119e40f4372
SHA256
04786a9c78483af33736c3e12464420b5c9b126da4dbecec465ef9f8e5f281b3
SHA512
12e3a8eaf2610db4c03b860342d95b34b05d405802509b0679948e8f688e10aa3d669df43f1e996374d4755937479f1e3281bfffd7d4ffdfef2d07074402a289
SSDEEP
1536:vK84nsau4Jy0QRJotU6zEgOiWGLNxcV/k67KXQl54:54o0xtzi1GLN2BkEx5
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
312bb7bdf7ce0d78e941791e059eefe2_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ