DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Behavioral task
behavioral1
Sample
3a455ed7bb8426b583235f4906e0e0f6_JaffaCakes118.dll
Resource
win7-20240704-en
Target
3a455ed7bb8426b583235f4906e0e0f6_JaffaCakes118
Size
10KB
MD5
3a455ed7bb8426b583235f4906e0e0f6
SHA1
89090be2380beb7d1d7c4672beedc751685d8927
SHA256
684966738ebfc0bcf0592364db7733e3cd96184dc210867ad6fd7f0e4426a64d
SHA512
dc6816952b4dbbf14229072020208c1ad4a7b7b947844aa5b5257d9af07b6bfe7af38854d25e2ee736d78c7febcc1b8127eb913621abd32b7563d4db5c011b09
SSDEEP
192:c5FqizFFMO2sMHYANNLlRUh/xSQt7lvGCFaNJhLkwcud2DH9VwGfctQ/9i:cfUjYANKF7vraNJawcudoD7UW0
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3a455ed7bb8426b583235f4906e0e0f6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE