DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
5e02b474a5836196897c0683de289884_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5e02b474a5836196897c0683de289884_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5e02b474a5836196897c0683de289884_JaffaCakes118
Size
74KB
MD5
5e02b474a5836196897c0683de289884
SHA1
d7f9132ed7aeaa1f6e87841d34eb640e1d9da2d1
SHA256
db0e14093e7edbb1c827eefb24a0aef9fa7d2b5963d6638e3a9186f824690f4a
SHA512
23e8fe0ca3d25d63be9af47f097c5a932ca6c02c0e7f6eacd9e1a5adbdbe266c698b91f759612b0ee92f6bcb4640d371fd0400fa1a98d29d4ae9cddb0e156015
SSDEEP
1536:8cqFyndIv/jI2Vx8SYnwt59e8r5fQuWkpdnD2NBHI8prYH0:ne7ISYkp9fQuWkpdnUxp9
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
5e02b474a5836196897c0683de289884_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ