DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
81d85ee5ae62aa1715beddaf13d51252_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
81d85ee5ae62aa1715beddaf13d51252_JaffaCakes118.dll
Resource
win10v2004-20240730-en
Target
81d85ee5ae62aa1715beddaf13d51252_JaffaCakes118
Size
52KB
MD5
81d85ee5ae62aa1715beddaf13d51252
SHA1
e74c025bf1442242f83d5066cee30dd2981ef4ff
SHA256
18340be1f0b7728155b02572dac262ca63f99592c7d6fef75024e809edc241ef
SHA512
2675f4d12f06502043b07f114d72b2f35515efe6e16a3bb2659761d7b51478b6fc9ca93f0cfafa7a5b327220aa961988d634451e06618e7c229a794f5f0f8e7b
SSDEEP
768:5BrGNKZasksAaCHFBhLPoFvHSrRlO2CxCN9jjGzjp5Ufxw0OtQNDPn5nbcuyD7U:5BlddalokN9jjGo5+tQFn5nouy8
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
81d85ee5ae62aa1715beddaf13d51252_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE