DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
7316c120e2ddc7f44890d2381ba302db_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
7316c120e2ddc7f44890d2381ba302db_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
7316c120e2ddc7f44890d2381ba302db_JaffaCakes118
Size
414KB
MD5
7316c120e2ddc7f44890d2381ba302db
SHA1
a6a169279793f1b0c7f07e0a3f0a697a1f5d271e
SHA256
46a9de71779c56e5f5c06499e7ac71f834f0246dc6de309616585a85ea070bbc
SHA512
ca16a72dd2b2a59295c26c4f516bfb0ec0a13b046cb873c000e7959ca67227e8d6079a90a3969f6fa284337321efe2b0aa12c3b46827cf14d45b1d81a8f5d2d1
SSDEEP
12288:GxsDwHARokNVUh0unqsDDPWwbBnOeSP+7kPvAm+InlDP2dm:GxBH8hn7sDDPWwb5OhP+Y4INH
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
7316c120e2ddc7f44890d2381ba302db_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE