DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
66105a7e7b3865290aacb66d55c0a085_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
66105a7e7b3865290aacb66d55c0a085_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
66105a7e7b3865290aacb66d55c0a085_JaffaCakes118
Size
38KB
MD5
66105a7e7b3865290aacb66d55c0a085
SHA1
b7c6c4ffee54d2c6c4d373044aeb4dc4779a71ce
SHA256
b7580181bad61dda90380c1d7dab1973e3534800ec0005b66d7f31027b77017f
SHA512
8f81162913d0c5ca04846962284e54b5c18d536c53b74c658f46796ed19d885c39696f732c1ce9919a44cdb8a9eec1b6841acff3e968f138be191aa93e4f061c
SSDEEP
768:2K59eaOPNZRED2gT1DXkTkXV9RYm/j9XaVz7o2wWKE:2K9eauREDH1DkI3R3xuOWKE
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
66105a7e7b3865290aacb66d55c0a085_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ