DllCanReloadNow
DllUnregisterServerA
Behavioral task
behavioral1
Sample
6542b2db5b04afe03e691dc2cfc8d2e5_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6542b2db5b04afe03e691dc2cfc8d2e5_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
6542b2db5b04afe03e691dc2cfc8d2e5_JaffaCakes118
Size
30KB
MD5
6542b2db5b04afe03e691dc2cfc8d2e5
SHA1
7682dc9c096d295273f76db9d1ba44d9efee6ba0
SHA256
d56ff07e97f5724bdfa1192f28395b1b6daf7c007cc80bb4f9889169b0658cec
SHA512
e7ada4acad327de02b06424f4200adc5a29277753ed4f255b7507e3dc8001efca08ff01c273dad1d48c2b81941e8e471b05fc9034e43b8d6af52e9a2a08cdcd7
SSDEEP
768:vRUu7U4W9LuWhXVtmv0FXCMPJMEmGlyMew7EzfU/r/Hd9:vRNTWJuWBK0FSpEFFCfCrl9
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6542b2db5b04afe03e691dc2cfc8d2e5_JaffaCakes118 |
unpack001/out.upx |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanReloadNow
DllUnregisterServerA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ