DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
69028333c98cce3ff55a14480609e3ed_JaffaCakes118.dll
Resource
win7-20240704-en
Target
69028333c98cce3ff55a14480609e3ed_JaffaCakes118
Size
80KB
MD5
69028333c98cce3ff55a14480609e3ed
SHA1
d25d765120aa4848c81d8002170a22542cef2193
SHA256
6cc9c7471cd623f5cf2e6b0ff777e651ee631a52398608e8506a70076101de10
SHA512
9c0f08a4b59680f8ba9b12c0725ce9724a94552a8b964eeb50d6c8e6bc8e42d6706c79dc86a7c049023c7e4d0e30cc51d97dbb50c0a73644a08c92827580e76a
SSDEEP
1536:QDYQkN4sqgSeJZs/AB4bXXtecuctcPgh8P+ZOTF1B32QMOibWPdnJhuydq0Inouu:lN4cjZL29ecudLGZK1B321qJhBQnouto
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
69028333c98cce3ff55a14480609e3ed_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE