DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
725db65ed24b08fed2938360a773c4a6_JaffaCakes118.dll
Resource
win7-20240705-en
Target
725db65ed24b08fed2938360a773c4a6_JaffaCakes118
Size
24KB
MD5
725db65ed24b08fed2938360a773c4a6
SHA1
da81cb87c53238f24fabeedb091d22af6c618eae
SHA256
3164fab4c87ee93915c3c752265f091cc8cede574cc3317fccc311ed91c8f64c
SHA512
80f13f220f8f2054af2859d5e2350ffc877cc16768dfdfdcba07949bc57e833fed485751717adae3a7fba87c4d3a06ed773bf6bebea74d3acc3b2d49ea8d69e9
SSDEEP
384:MSzUI9VAFy7cBXI4l2e3phW3OvawsS87KmGC14+Rqo3y59p/+Kvk7MlUeOAKv8ef:MsTr2XLl26hW3OPmN4tq8/DiBvS
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
725db65ed24b08fed2938360a773c4a6_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ