DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
41043ea7f6b9e68f515df8d9ec4d0137_JaffaCakes118.dll
Resource
win7-20240708-en
Target
41043ea7f6b9e68f515df8d9ec4d0137_JaffaCakes118
Size
102KB
MD5
41043ea7f6b9e68f515df8d9ec4d0137
SHA1
e600eb5a538298eb4d4f82dd3bfc35d80b756fd5
SHA256
1f2afe2b7a9b386fafddfe07100c9c89101f4656479e10a6c86bfebfc20cf522
SHA512
f1cdb4aa808b9541734a40e79f7973a6252948747c78af779a40c35b7756ef6b4313534b5e03f545c4dd2057dfa6d300a0d7254e47acc08773c9f526f4eed6b6
SSDEEP
3072:q9IFwXBCPZa6eiTBsDGOsYdb3umfWEE9hQpx8:q9IFMoBVNUb+kKhQ38
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
41043ea7f6b9e68f515df8d9ec4d0137_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ