DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
5d39df93cd9f58c519e225b77101b2fa_JaffaCakes118.dll
Resource
win7-20240708-en
Target
5d39df93cd9f58c519e225b77101b2fa_JaffaCakes118
Size
269KB
MD5
5d39df93cd9f58c519e225b77101b2fa
SHA1
679e0d9abfa22fede9adf04cd7ca5b2d67ce2c74
SHA256
950623aa207a3fc742d3bb37da373207303285f49eb855553adb486e83435af6
SHA512
63bb9caaa41741dff2666734e42c51aa8b354f22f224ef64826c2f5fd8f11589063bc95f39033deb10c000199cb73c34944550166efcc44b23e6d75bb30ca740
SSDEEP
6144:R6D32kQKpZqLl+qpqxl7uDUh5ZWGv9rLC1uDCa1aFD:R6yTKL29hwXIGv9PCw51
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
5d39df93cd9f58c519e225b77101b2fa_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE