DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
471ee4f46fe98f7b58851ba62d32eb04_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
471ee4f46fe98f7b58851ba62d32eb04_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
471ee4f46fe98f7b58851ba62d32eb04_JaffaCakes118
Size
52KB
MD5
471ee4f46fe98f7b58851ba62d32eb04
SHA1
1bc829894c00fa7758b02eebb64b8b2d3d697583
SHA256
2440ab9e257c60b0f3efa8eabcfa2dd4435ea7b695abc5803eea196c1962af69
SHA512
46cb9a8682aa595d999e7eb59e5eb015e4bf6bc15bbc6910b0981480302cc596557334fee7d2cc4c3b6b1527688b7149fac507eb8d7caaf9f48883cd1b6ce15d
SSDEEP
1536:3yTo6Nxy1s5WDQP8MBV/wdJlSrvYxL3zknouy8:SR5Gm8FJl0YJ3oout
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
471ee4f46fe98f7b58851ba62d32eb04_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE