DllGetClassObject
DllRegisterServer
Behavioral task
behavioral1
Sample
5f3a4d00494962d36c17b737b1df645c_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5f3a4d00494962d36c17b737b1df645c_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5f3a4d00494962d36c17b737b1df645c_JaffaCakes118
Size
65KB
MD5
5f3a4d00494962d36c17b737b1df645c
SHA1
b2361cf9654ad29590e6166688e5f35e2acc3c12
SHA256
40918ccb9a466df498aef59ecf93a99fdb0aeacbdec776b975a1c6de104c1c5c
SHA512
fae9edbee430df764ef1e62020dcd12ea0e1172ba3f2cfb8101610339993c2e3b43f139198795d164347c3954a344ca840046ef7872793731805ff8c5fcedbf2
SSDEEP
1536:O8r3XH93fMXB5/KPAA1l2Tq3s6ecDKdCrzsFykj:VrGXB5sAA2N6B20Uj
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
5f3a4d00494962d36c17b737b1df645c_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ