DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
5bd18cd67aec9cb964467c49110ab302_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5bd18cd67aec9cb964467c49110ab302_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5bd18cd67aec9cb964467c49110ab302_JaffaCakes118
Size
70KB
MD5
5bd18cd67aec9cb964467c49110ab302
SHA1
47cc5ea546daa61549707174ea4bae4abe1056ba
SHA256
d0abb84909d314c6bc46dd262888a0e171f10adb9b813873007db33488628160
SHA512
27569d00fa0fea30ad7c49f66e8449e11eb7d9746f6ebd6b6fd8ecefa3d15208d70280e72261853b8d7af8223830984f5e41611ecb79f65ae0bd07e721703f83
SSDEEP
1536:YQ6BFyKVgyvTOYy28d1tdudbCnLk5wsLFqJl8uosSbnIMHfa94:YQ6BFVgyvCYytdsbmOFqv7C+
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
5bd18cd67aec9cb964467c49110ab302_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE