DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Behavioral task
behavioral1
Sample
8da349ecf5f123fb43a2435e1b88a8c4_JaffaCakes118.dll
Resource
win7-20240705-en
Target
8da349ecf5f123fb43a2435e1b88a8c4_JaffaCakes118
Size
10KB
MD5
8da349ecf5f123fb43a2435e1b88a8c4
SHA1
4fd7d2715f2339d78420da64c6f25dcc519ac19c
SHA256
de226b32d63986109220c73c40ba4b7d1bb4f9059385f9ceb496a779fc0f9984
SHA512
1561872a1483e0cf30e7420d109d2de0106f6ba4a3dd6ea65f1e968bc2eaa56f51b9c6952d1cb0a8bd35a8aaa30f6a5b3799e668be02173436e55822f2a73632
SSDEEP
192:j4o7610lqm8hkH0yXuiJou+33w5FaNJhLkwcud2DH9VwGfctgHH:L761yqm82/vJe3MaNJawcudoD7U
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8da349ecf5f123fb43a2435e1b88a8c4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE