DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
63fa58e12b2058ab26e6bea1aef7c55d_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
63fa58e12b2058ab26e6bea1aef7c55d_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
63fa58e12b2058ab26e6bea1aef7c55d_JaffaCakes118
Size
60KB
MD5
63fa58e12b2058ab26e6bea1aef7c55d
SHA1
8adef42f2e67fbe9b2436067041d17405c6adac7
SHA256
6570200cfada0a29625e7f779199086da7d45129a2217a4d837165657fffcbb2
SHA512
257ddb9580f2710127c79c8a7bd5de735b68044289521ff5b199af305b18258a179954c5706268753ddaae3cbb6a9031b3504fdb6a302b861e6e964ce2a957bc
SSDEEP
1536:DyGwFdtdDqSM4NscSfcQexWlW5tVNsIeU4j4Ktixf8xG7tNbNWd59:DyFLc4iFblW5zNsIez4Kt05Nb4n
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
63fa58e12b2058ab26e6bea1aef7c55d_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ