DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Behavioral task
behavioral1
Sample
744f2525e13099f5234d6497abb584a7_JaffaCakes118.dll
Resource
win7-20240708-en
Target
744f2525e13099f5234d6497abb584a7_JaffaCakes118
Size
9KB
MD5
744f2525e13099f5234d6497abb584a7
SHA1
00d39c525842aa88c59cef9cb2bdd012be6f52d6
SHA256
ccb79c374b508eb9958246cc4001bc071deb6cbe5200bdd1687ac9891d134bc3
SHA512
378ba7fdf87963f48b89f16e12237c96aa8fae083d324eff7671531b6bb07f6b4660ca78c955fb05e24ed4e136d44240d9848ec5ba60d784d483710753492fb5
SSDEEP
192:QWY6YCTSukW5g7N6Q4qCFmgFFZhbaFaNJhLkwcud2DH9VwGfctfXb:QvsS8INlCQeZhb+aNJawcudoD7Ul
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
744f2525e13099f5234d6497abb584a7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE