DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
827f1f6b76eddb9fbfe1c9b42f5e9bf2_JaffaCakes118.dll
Resource
win7-20240705-en
Target
827f1f6b76eddb9fbfe1c9b42f5e9bf2_JaffaCakes118
Size
15KB
MD5
827f1f6b76eddb9fbfe1c9b42f5e9bf2
SHA1
1d0a45c0b84cb155599aacd35c8508956deaccac
SHA256
2437cf8cf187b59123d40851a0b2f0f973cb0fa8702d0d0a31f4a6e4788fb141
SHA512
3d91ce9545b9805b7021b7f393e22a4601e86a077e9bb835aa33eeb117b93aa943df17780eb9cdec8e36c57b0dea440f19f1b1f139ad9263e974b68173612ab8
SSDEEP
384:+jOM4CtcZJSfBYM1DaNJawcudoD7UgWu2ZLWfVxKYJLC:kd4C6Z63snbcuyD7UX4LDLC
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
827f1f6b76eddb9fbfe1c9b42f5e9bf2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE