DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
49fc4bd2cc34736338143020eb369249_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
49fc4bd2cc34736338143020eb369249_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
49fc4bd2cc34736338143020eb369249_JaffaCakes118
Size
53KB
MD5
49fc4bd2cc34736338143020eb369249
SHA1
7e9aa4c0f6b66548f766c4519c0e4174860939da
SHA256
dbebe1a63b46c6a8163f2b557cab1b7e98defce24bf99a69fb9688e47d940a9b
SHA512
490efa3b59ade7f7ea0112717f96a54d1ba86ac4b300d976549fbda25525fa6b512dceef6d8ef7141ddbb29fb7fec5d88f82941ddb6f9c48acab5f3c35059f9b
SSDEEP
1536:fFdhCfQCpcfXdadJ91HKwl3L9X3H6nouy8N:tdE4FPdGJ9/X3Cout
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
49fc4bd2cc34736338143020eb369249_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE