DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
3607171566c0b32e14fde679c1878083_JaffaCakes118.dll
Resource
win7-20240708-en
Target
3607171566c0b32e14fde679c1878083_JaffaCakes118
Size
270KB
MD5
3607171566c0b32e14fde679c1878083
SHA1
b0aec8b4a50e0369a5eae31f936695dddad6fe47
SHA256
99be93bb8c35bf5cd5ce6a9e91e2e2acf6c0236dcb25a114b366747ce3eebc00
SHA512
4ae067c1d1d894c8895f48b95c473fd91907b683924e4d05131888b5716a15eef13a790c1023e5a0a2414f88ad296114b7501946fbe8d27679471c9ca72d9153
SSDEEP
6144:uUPy38LUwQ7/YHYrPNCva0UDfl/LUFDZSbD2owNTtK:uUPy38QwQkHYrPB+xYbDta
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3607171566c0b32e14fde679c1878083_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE