DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
8c8d6d7bc86a4eba74260a6df910633b_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8c8d6d7bc86a4eba74260a6df910633b_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
8c8d6d7bc86a4eba74260a6df910633b_JaffaCakes118
Size
40KB
MD5
8c8d6d7bc86a4eba74260a6df910633b
SHA1
469f8392c09d1d80a0a2e64934510c474da4b058
SHA256
b2106daf29e0d26f32705abb678b2f46918ca1b1f58f06d099abdb8ed5d2e4f7
SHA512
7cf06e427cebf9afb3e6fba5b7b68ec8f2098001fe2cdead6f9303d06e0e974b19e4cdb281c69d93fdee6cea0a7d102c93c191c2865cb7f780dae102b76f92b9
SSDEEP
384:F+V091BQWfmG5Tv3MDSBXFR5dIwbq/7VR33P0DaNJawcudoD7Uj:FIy7jzMDSBXF3G5RP9nbcuyD7U
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
8c8d6d7bc86a4eba74260a6df910633b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE