DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Behavioral task
behavioral1
Sample
8c1ab7ec745930f65f9ab85e7c73337c_JaffaCakes118.dll
Resource
win7-20240729-en
Target
8c1ab7ec745930f65f9ab85e7c73337c_JaffaCakes118
Size
9KB
MD5
8c1ab7ec745930f65f9ab85e7c73337c
SHA1
4f61c7f0abb6435acc90f64932d2b590e44fee9b
SHA256
5343a7fdf567ebd07b425301ecabafabf652bf0c9aca1a72f797c3918271d794
SHA512
92f73ff6205ee4c8aacffcf8849bbe745643bad2dd978f71188ee18e38189ac177a9f4a91ab26565d8b4819fcaae7441660e2751bc12328396dc31082395fdae
SSDEEP
192:0qPcHP/L33S2p4WRt9DX0JabN9W47URcbVIdS4FaNJhLkwcud2DH9VwGfctjhX:4TFp4itl0BAiYMaNJawcudoD7U
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8c1ab7ec745930f65f9ab85e7c73337c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE