DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
InitDll
InitO
Behavioral task
behavioral1
Sample
8a0edc7811b210cc42b761d6ccf690fc_JaffaCakes118.dll
Resource
win7-20240708-en
Target
8a0edc7811b210cc42b761d6ccf690fc_JaffaCakes118
Size
50KB
MD5
8a0edc7811b210cc42b761d6ccf690fc
SHA1
a678e45856b9ffa5fee7f88441d68a156f5000b6
SHA256
6c66d0cd018e10a29030c5c4ee35ecbadb202cb43f9fce349486ad9942a4805d
SHA512
b2cdfd5a134549bb87cf9baf5eacea078ba5485aefce43f3fdca05a99e53fa7fd621c9ff838fdfa25ddc00ae47009f81ff305a25f8fb23bbf347b34bd8a1af9e
SSDEEP
768:M+15iesD3g92FBJBZPQyJ4EC6q+zqTktDYdCjx0ky7zW3+ihVGzutRHSp:nTie2LtbJ4RkmQtDYox0VzI+9KLk
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8a0edc7811b210cc42b761d6ccf690fc_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
InitDll
InitO
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ