DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
32058f8847394cc6de559c133a3edad2_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
32058f8847394cc6de559c133a3edad2_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
32058f8847394cc6de559c133a3edad2_JaffaCakes118
Size
10KB
MD5
32058f8847394cc6de559c133a3edad2
SHA1
d5316c74bbd7be68a9594f4c2951c63a707a3a65
SHA256
8faa0153b29d5705b4407a8135f9f7fb59a67d67ad2b565fbc5102ab7b632866
SHA512
ccdb6bf5a4af0301c622c197962d295468a56fd3dd0902b17e00f03e019cccd1a4054bcbeec61a987da37c6a8afdb60832b408fb094809302659297ff020a16d
SSDEEP
192:9JCBIoASQ/ybFqWkYDbZCpyRY0dCGs52bnzFXMb/ake6A:r3oACbrFwQdCtQTk/re
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
32058f8847394cc6de559c133a3edad2_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ