DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
4699dcfcffe7b5ef542de03cc0b7f993_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4699dcfcffe7b5ef542de03cc0b7f993_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4699dcfcffe7b5ef542de03cc0b7f993_JaffaCakes118
Size
39KB
MD5
4699dcfcffe7b5ef542de03cc0b7f993
SHA1
e814b967f6f8f8507af243428174c7fb6bbbcd41
SHA256
92aa99dea9a3c73874235fbfdaed7da3123c23a95ed54bb98f54b335ff6bd82b
SHA512
fb7965cfa155369c6c89d0f1b6c34d4bdc177743421f00c6a431f4dc54d085cb8f40b581ec93854a7d9c8dcdee19f6c725bcb4fb4353907d024591e8c05ca4ff
SSDEEP
768:zyGkIuiGeO97+zLzgNsgftjHgr3UFi3+mpJz9qggUCg:zyGHusO9qjgNsWgzeiumpJRqggW
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
4699dcfcffe7b5ef542de03cc0b7f993_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ