DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Behavioral task
behavioral1
Sample
81e07f9498c7bfadb2d34f8334ed4f3f_JaffaCakes118.dll
Resource
win7-20240705-en
Target
81e07f9498c7bfadb2d34f8334ed4f3f_JaffaCakes118
Size
8KB
MD5
81e07f9498c7bfadb2d34f8334ed4f3f
SHA1
3d3db570453bbfc769367f6d5a021cfea822ea9b
SHA256
55836d9c86a3c98559bed873bfd5c0c114d1b4f488695652a2928c6332ef9bed
SHA512
337255ab36091f684085dcaa178212d46c78c56dfa338ac2e4b3f09819df9635651c55e7133a9b4dee826baee4406bd8dfe7180dd465a0d30a78e2e4672f45ba
SSDEEP
192:zfVrgU4oDaojnlHSXQBkSIimH8GQIZhiP3cuK2f8aWe3S:z+U4ouobxc/ZdZhycX2fJ
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
81e07f9498c7bfadb2d34f8334ed4f3f_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ