DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
3abf1a2751b69656ef7231cb7dbbd249_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3abf1a2751b69656ef7231cb7dbbd249_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3abf1a2751b69656ef7231cb7dbbd249_JaffaCakes118
Size
34KB
MD5
3abf1a2751b69656ef7231cb7dbbd249
SHA1
9d6eda1a1bbb9ed266607caa4aea21342683da3f
SHA256
cb03225a936de54484011d73bcb78112afd29f903300a81a3cedba969f9019fb
SHA512
0065634820549c3c6771228c5d1fe0c177e4b240105fad07ee36a3a44f72d2cc61694ca5c086dd43cf5fcc9157f04fa915412a2ddf3385bb1b231ed9a9843290
SSDEEP
768:K2olAAahK9IYh0AoUNp8Wny6nTvkT5xwa6EWajcmP243:lkZyKvuA7NpTnyaTvAxFWawmh
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3abf1a2751b69656ef7231cb7dbbd249_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ