DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
62d284725d364fa4f03e643a52be3975_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
62d284725d364fa4f03e643a52be3975_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
62d284725d364fa4f03e643a52be3975_JaffaCakes118
Size
12KB
MD5
62d284725d364fa4f03e643a52be3975
SHA1
cc774d4d01b9a640c77a9814ab60edb0a4993080
SHA256
38565d8dfc9ec3e28579a2818fb4436281532308c408d502e6dd1d9ee083655d
SHA512
438ddbd3d7e337b433a14db029cd5ca8df27c4601341328a21980309300b9632b9251adb4f682d4131ef9bf75f25e2de6908474c417674d87273d94533e81b1f
SSDEEP
192:kEoPDecgUGBwkO7azMveHcVjdsCTNnMnTLxP6d9ni7SiaifB6bGOk54407yA:klbgtBwkO9g0jmInSlS0l7i
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
62d284725d364fa4f03e643a52be3975_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ