DllCanReloadNow
DllUnregisterServerA
Behavioral task
behavioral1
Sample
5ad6d2d0ad155e0b9bc72c36ac95c896_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5ad6d2d0ad155e0b9bc72c36ac95c896_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5ad6d2d0ad155e0b9bc72c36ac95c896_JaffaCakes118
Size
24KB
MD5
5ad6d2d0ad155e0b9bc72c36ac95c896
SHA1
667edce5837cccb6ece2f0c715ffab1e4f7b297d
SHA256
70fb6c318fae9f11d1c71f7efb0646a8e611595955028464a5b024bd58187dcc
SHA512
b955e5cfe5963f344acb61765dfe821c44e0f4d0233c09b835b84524785bd910a9b8006f774f399e7ba95a73bc84c85dd4430c758d4c7245f5b9de373ee944fe
SSDEEP
768:vj0IwZZd0OgS7zI6wI8G4UW3yUMznD2eS:vj0IwZZxV7MlIt4NTMzD2eS
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
5ad6d2d0ad155e0b9bc72c36ac95c896_JaffaCakes118 |
unpack001/out.upx |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanReloadNow
DllUnregisterServerA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ