DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
83a3201f3b0d1afecaef04348884a901_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
83a3201f3b0d1afecaef04348884a901_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
83a3201f3b0d1afecaef04348884a901_JaffaCakes118
Size
48KB
MD5
83a3201f3b0d1afecaef04348884a901
SHA1
0cf00ee2f65336ef7e8baf011fc0eae6a193cacc
SHA256
f20557438caaa19570745854c329abedd31b742e19f578029738953ce79549d9
SHA512
455875beac077954f3759086224d38f9223a5be1a071dd9fef4fa936905c037a91dc80e8d45601c7aa39daaa361473cdb89416fa1affd002e7936eb86938c3ad
SSDEEP
768:s8XtX7D78bDhgtYbg5k/1Tbva1Mf3mhhnXCejWfQIBgv9Vvz9eanbcuyD7Us:9HEDZXbicF7QdLhnouy8s
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
83a3201f3b0d1afecaef04348884a901_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE