DllCanUnloadNow
DllUnregisterServer
Behavioral task
behavioral1
Sample
722546b8994ee4c8a1ab18e185e8e31e_JaffaCakes118.dll
Resource
win7-20240704-en
Target
722546b8994ee4c8a1ab18e185e8e31e_JaffaCakes118
Size
24KB
MD5
722546b8994ee4c8a1ab18e185e8e31e
SHA1
f7697abc8204cbc59ff2ae9217a6677f49c928ce
SHA256
c98f62794e5b34bfdaa1e9c2022573ad377510d2af7743afb130cfce918e5097
SHA512
c1e16027cf1c5c215b3c8e52e72267a19278c474a90f3b7871104c72be0ac635083092362b5a9e34db5f4a2905089dcd107e0e20512697aaa89bc16981be9f02
SSDEEP
384:44x8hSpG4kx3rUwsiuApC7EDG3Mos6/jNGfvnwp2cFP3tpBMZf111sZ:LK3GcpLaZ3Rz8cF6n2
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
722546b8994ee4c8a1ab18e185e8e31e_JaffaCakes118 |
unpack001/out.upx |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ