DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
77abe10bc94202976014f63d7ad5f474_JaffaCakes118.dll
Resource
win7-20240729-en
Target
77abe10bc94202976014f63d7ad5f474_JaffaCakes118
Size
69KB
MD5
77abe10bc94202976014f63d7ad5f474
SHA1
08a34e1a78f9503367b7d9636f03b179f7854d69
SHA256
ae9abf74866aec2c1f5f768bae9b23a5b87700e9b1543df48301fd7a25e79ca3
SHA512
f40a66c7bad55f89d02d235398fc87f09aad6fadd82057b56e6bb48136e7cedf51100bb3aba0eb4a44e4e3e46d9526230fe4117c8a1ed500f9dadf97e1e6e391
SSDEEP
1536:B2VWjSfxr9GpYudAuy1OyTaiAhfs1dEO7dVJCMPOzo5pddnouy8JF:QoGfGpYuWObPd4EOBV8MPOzwproutJF
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
77abe10bc94202976014f63d7ad5f474_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE