DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
8ae9cd79565e0d60a164ab7346e921f7_JaffaCakes118.dll
Resource
win7-20240708-en
Target
8ae9cd79565e0d60a164ab7346e921f7_JaffaCakes118
Size
345KB
MD5
8ae9cd79565e0d60a164ab7346e921f7
SHA1
e016760fda07562e7e6805da5384fe6b58513d83
SHA256
221231cde46423cf9a5b77c4bcb848be3fe156f93a51316f10203fb65bc1558e
SHA512
2c7a32fc11fcb72db68301080dd3e6a0a3830bd9e45c4da1884ab59d5f4d0ee9c8310e0a717c40d21326c83554c2c1bfed3fea001b8fc0c6f41fcff1bc3bbc12
SSDEEP
6144:UVkkFJbluR2y3e/EUrjitTSsj26Pz26Lzb8fr00gOeFdifXkJXL43uwXhRYiRXFm:U3vblEuMUfitTSsj2w26Lkj0yeFdIUJH
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8ae9cd79565e0d60a164ab7346e921f7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE