DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
8cb8f9afc85c0755c5510c8eafdd660c_JaffaCakes118.dll
Resource
win7-20240729-en
Target
8cb8f9afc85c0755c5510c8eafdd660c_JaffaCakes118
Size
164KB
MD5
8cb8f9afc85c0755c5510c8eafdd660c
SHA1
4cf98a66932d71e1aba6217363ec1a2c7391653b
SHA256
5d111fd580fbba0b2c3d63613d2dbce958822e1c994d4ec8ff69cb55b71c661a
SHA512
6a68159db90c83015498bea6b135369b2471d2d9dbefd0e3dab3cb5f62e9ad0edd5235c5c42b1a0bfe0a999e30d2e244c2c4c475c41488ce240ed3f9e68a3c3e
SSDEEP
3072:E2GN8gy53QPoo+adugbdOiOUty2b+o8CEsk5u94GuKoiHOIp5/YI:EONooo+adNbt6od+5C4GloKpNYI
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8cb8f9afc85c0755c5510c8eafdd660c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE