DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
5a14a515f638e2fbd5f5b386b3b5b91d_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5a14a515f638e2fbd5f5b386b3b5b91d_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5a14a515f638e2fbd5f5b386b3b5b91d_JaffaCakes118
Size
56KB
MD5
5a14a515f638e2fbd5f5b386b3b5b91d
SHA1
ab91646dfa2904c0337219d27a1d2d53e95686d6
SHA256
1adfa3d261f3cd6979b3dbf4dd8022a14728d3afc6b73f5c1fc999f0b29e0ad5
SHA512
87d99b63ae367cfeeb297690f9fd4be59fc4029b770d50ba7393d7312408b1778a3c510fba2f90e84952980a305fda5591ec420c4ad3ad4b49ebd1a2532602b0
SSDEEP
1536:ay+Aoiei0b5wN9uSIknPVDpIzyWY98BUinouy8:n+gei0bko/knxpIK9oU6out
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
5a14a515f638e2fbd5f5b386b3b5b91d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE