DLLGetDocumentation
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
65a75efe401033fb28ceadb42efb2547_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
65a75efe401033fb28ceadb42efb2547_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
65a75efe401033fb28ceadb42efb2547_JaffaCakes118
Size
61KB
MD5
65a75efe401033fb28ceadb42efb2547
SHA1
216b46cef966860f6f969671d5bf8f0ae1ca25af
SHA256
40b23e160d63bbaf9fb7ce0734d0e1f04316514ef327721882bf23fde5148069
SHA512
8e079813b205dc6b9cc55317d042cbee721ea4b58c55abca756c50a80b573d56ac99249999381c41166d766331579cda0a740f7a65ef8620826a7d1bc5dbf8bf
SSDEEP
1536:JxfB7iuCgEK7gwxv0awoJn92zr7o6vk9IH9kcvd:75uuCglgaslo4PFYq9Hvd
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
65a75efe401033fb28ceadb42efb2547_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
DLLGetDocumentation
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ