DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
3c7b2e0ad6d0668e502c96f2665ce7ec_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3c7b2e0ad6d0668e502c96f2665ce7ec_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3c7b2e0ad6d0668e502c96f2665ce7ec_JaffaCakes118
Size
45KB
MD5
3c7b2e0ad6d0668e502c96f2665ce7ec
SHA1
9558093e5a815d405bea535e888bc9253b13a33d
SHA256
14889e897a199c5c4b8bd098e6d6781e96b8130be27b1289e8aeb9c696f64399
SHA512
24d1c0344d4ecb6ec41a0fb07acf27b2bf89cf918e469ec1479770087f31ef1cae13e60e89a63672490326c85a8b08cbd31dbd1a289bed74f65dd89bc271cc70
SSDEEP
768:4iY/WBNx+ex9W3uND6DTwW/X8SKjxZ+ZAuTQrSpv4sbk2jTXJmbrnYdSV21ZKho:4iA67+P0WDTrwjxwZAuTySpLb5XQbrDF
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
3c7b2e0ad6d0668e502c96f2665ce7ec_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE