DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
5d8815e75c1fde142f7e8e72281db174_JaffaCakes118.dll
Resource
win7-20240708-en
Target
5d8815e75c1fde142f7e8e72281db174_JaffaCakes118
Size
185KB
MD5
5d8815e75c1fde142f7e8e72281db174
SHA1
3f1e9f1a6dd8ca1cbf55dbc339808f7dce61f053
SHA256
e72a0cce4ed782236902dc0095ab6c9507e38c54fd68e40e50aa3238c3fa176a
SHA512
06cab7edb61f12bfa1d5cdc5d10138fbc7ea0f6606adc974bac01d615a572c2afce0164305c4f18b93147074aef06666310f78838afa4e71faa705542c47fff1
SSDEEP
3072:WKI3sAwCvVZBw37APZPz4v+6xf2TJ8XHiH32O1wfMlkYUx7vRzRDq2EX6zNoutA:PsRvVZBBBPC5xuTm3iXn1ax7pzRDq2Ep
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
5d8815e75c1fde142f7e8e72281db174_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE