DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Behavioral task
behavioral1
Sample
5d35d00319dce42c8e60c5995a20cc8e_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5d35d00319dce42c8e60c5995a20cc8e_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5d35d00319dce42c8e60c5995a20cc8e_JaffaCakes118
Size
69KB
MD5
5d35d00319dce42c8e60c5995a20cc8e
SHA1
bedec65a8e42fdaeb8232528233ecb95ab394836
SHA256
6174f1815385aca756137d70c7d0120c867c3f77d4152989a466c7000d5b825f
SHA512
7cedde85f793dd091688dc1e8db970c4438e393d752e6261f897733d889f28fe7e19f1ece23e8cecd96b10bc872069aaf3b5af8cf5a540df0c1ff7f167887140
SSDEEP
1536:EUWut2sS3GKktFLsacmau4vC1zOr+0syS86yvc:Wut276FLsacmaZSarbs98lvc
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
5d35d00319dce42c8e60c5995a20cc8e_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ