DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Behavioral task
behavioral1
Sample
604e2fb38baffacd39c436cf3d736b66_JaffaCakes118.dll
Resource
win7-20240704-en
Target
604e2fb38baffacd39c436cf3d736b66_JaffaCakes118
Size
10KB
MD5
604e2fb38baffacd39c436cf3d736b66
SHA1
776bc57cd88b655da42aef3ec2accddd03da7cdd
SHA256
10995d6958fd5ff5827319e793391a3a1be1d33bf85f572dcaccab8f4ced5c17
SHA512
48b388af886f8d171983557443e5b11d5d4cc0a42ad92233af2948c87ed595f76532a77dba6c0fb50b2bd437f7e18bc227be26d8eb66a52bc7b1993e70d7b00d
SSDEEP
192:ax14WWHyFMilkposOLys2Gwhud2X6rFaNJhLkwcud2DH9VwGfctg8H:47rMiOpo7Lys2Fu/xaNJawcudoD7U
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
604e2fb38baffacd39c436cf3d736b66_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE