DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
834c19e6a535c4eaabc9f8e322e559b6_JaffaCakes118.dll
Resource
win7-20240729-en
Target
834c19e6a535c4eaabc9f8e322e559b6_JaffaCakes118
Size
78KB
MD5
834c19e6a535c4eaabc9f8e322e559b6
SHA1
ace8e62199f8475b191d2700c4e57b375fb29478
SHA256
cf6190dd8e304c34bcd4508735b2fe3f39d09b7985a45c00373f96617adb1044
SHA512
42ff445655f5775dc3efa2fdf0c5d28c2a30106ea3ded6b49f31be7f2a545c4f9b8fd261c3f58489b527e07a090c09ab2ce4d5a2a15aae1180c0c39c3d963818
SSDEEP
1536:1BzfcIfaT2yMgtjosBfXgU7hHgSQPPA3LMF988IXBzR9m4OGFS1q:4If2HjosBfh7hnQg3L298NR64TD
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
834c19e6a535c4eaabc9f8e322e559b6_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ