DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Behavioral task
behavioral1
Sample
84fa1fe94b94f4eb335b2fba5a7e3cef_JaffaCakes118.dll
Resource
win7-20240705-en
Target
84fa1fe94b94f4eb335b2fba5a7e3cef_JaffaCakes118
Size
8KB
MD5
84fa1fe94b94f4eb335b2fba5a7e3cef
SHA1
0013c64fc68ab404fee71f4e6bdf2f61c3f50e08
SHA256
0c0ce9b4de743c2e9d3adc5ea8a1bf6eed3ff497ac12d5906420747c27e693a3
SHA512
50728cbb01364da838c20f174798abf94d318b7e2620afa6c6a899844ec23416f4885e34f5e1bba6a38cbca55335638a95fa599787c90c2b07f75f4e90c34df8
SSDEEP
96:tYgf7/ruAqg8w7xuQ8eXseb6mv9pCKnuLS2SGGFgyNjw1PBpv67mcHHsAlFdDmUr:+gfTH3s8sebr9ZuLhGFgBHkmcB5/
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
84fa1fe94b94f4eb335b2fba5a7e3cef_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE