DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
4903fe3751f023f53409c88c2bf66491_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4903fe3751f023f53409c88c2bf66491_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4903fe3751f023f53409c88c2bf66491_JaffaCakes118
Size
185KB
MD5
4903fe3751f023f53409c88c2bf66491
SHA1
13dd986e9d56bd3c387149a961022d29d3de0941
SHA256
92e7e7d6351b3a9cf292b4b1fd2a7ca15d283794349d7937c9e4cad6b19679bd
SHA512
2c2a6f6d89517e0111612b4eef119c736f8c9d71f1cb7c10517a3f14a3ba52f1b19780fed2e0f5ea51266c7dd90910235cc13c0c1a9d5a5e1b2c9265c3e201e6
SSDEEP
3072:5Lmw1mLg8GYjlDBTAVlHX2BvECFB6AUW5Y6JnmL+IegIbv/QIWp9CuJT3NWDRFKE:TmU8GYjlDVWmBFFkAN5YPLgggv/QImC6
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
4903fe3751f023f53409c88c2bf66491_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE