DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
60aa8d9d92b3ba690291469ffd8695c5_JaffaCakes118.dll
Resource
win7-20240704-en
Target
60aa8d9d92b3ba690291469ffd8695c5_JaffaCakes118
Size
232KB
MD5
60aa8d9d92b3ba690291469ffd8695c5
SHA1
fe6cd205c9e58f7dc4ee968e85e6ecc7d2bc7efe
SHA256
ba12dfbd8d9029b2f413ec8de84c0b33d3110be39b794ae63cae5515bb9617a1
SHA512
2abf8a4e46a6bcad64b52c4e4e7913a073968d0e4eeb1df12d031e2ab00e4a19fadd8043b8c4b9b026532e6283c6c433844575d109f8b7b350a238c2fd7f4054
SSDEEP
6144:Pahv75iH71UHwTgvOKg+wgUNnmHb1p1ZRSqFxaDDMipP3E5:+75ib1UQg2SwgZRZeDD/w
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
60aa8d9d92b3ba690291469ffd8695c5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE