DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
ID
laspi
Behavioral task
behavioral1
Sample
727ecd66ad1700383e4b050af21b6715_JaffaCakes118.dll
Resource
win7-20240708-en
Target
727ecd66ad1700383e4b050af21b6715_JaffaCakes118
Size
44KB
MD5
727ecd66ad1700383e4b050af21b6715
SHA1
5728d776707a6a557f10ef9abc306da9d52878c7
SHA256
5439edbb57ae0ccbccfa5090291d19d2a2373ca0a80fdb9dc1b5db73a9eea299
SHA512
e318c00c6509480be38540b6afbe1aabc4f4f66d5cdb915ff24edbe464b9519becc48d54ecb5135a5c1cd8519e33181716a6e47dc7532c380a731441288a9a6d
SSDEEP
768:Wf1XkjD2R6LpjPepSuxQvLKy4kk3IvikxGsJ/XYMbexSm3Y286Jt:Wf10/2wNepSF2wk3IxTbegQLNt
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
727ecd66ad1700383e4b050af21b6715_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
ID
laspi
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ