DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
87b443283c731ba5fc1071c77240e62d_JaffaCakes118.dll
Resource
win7-20240708-en
Target
87b443283c731ba5fc1071c77240e62d_JaffaCakes118
Size
229KB
MD5
87b443283c731ba5fc1071c77240e62d
SHA1
f81b0235707243e9fc7368c300468da87d8fff0e
SHA256
3204451a74aa1c2876213af6801db87d2783a2722cc560eee0d495a3c15aa2a8
SHA512
1b424e429e5e30dea643c9ad599bc9b1252f5dcce2ff0bcb6bebb9b862dd3f03f0519b567ca55211fc22e20fa8625d23f5bc3d255f031ae321a23d6feb71e216
SSDEEP
6144:MyIvCBK2FIaCO7zwKB7TavcxsMg953uevwl7/4j:MlqBKLkz9B78cZe3/w7/
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
87b443283c731ba5fc1071c77240e62d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE