DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
84dfca5d945221f6db1abdf9aa924cd5_JaffaCakes118.dll
Resource
win7-20240729-en
Target
84dfca5d945221f6db1abdf9aa924cd5_JaffaCakes118
Size
229KB
MD5
84dfca5d945221f6db1abdf9aa924cd5
SHA1
48700b3c584f7f4f4bad58410fc4ab69cad4cd81
SHA256
f5b9559697ac028808e32b429cb9a39b1aba5ede7fe5fc0e9e5bbfea13f528c8
SHA512
64588670d748c9231b16d4c749cb02ffa97a14440912b8838ae2cdeb294c6a047ba4ad2ff79d3bfa990105a42857cb4b4d5323e428e2e625d4188d218a3a733b
SSDEEP
6144:FJ/wEuBAHOJLiB+qzvfUF0QJtazeSZvUkIhFpGo50:FJ4E7aLLqoF0+LSZvtIhDGo0
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
84dfca5d945221f6db1abdf9aa924cd5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE