DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
8ef95a17d8d3acc07a153d62ece3aff9_JaffaCakes118.dll
Resource
win7-20240708-en
Target
8ef95a17d8d3acc07a153d62ece3aff9_JaffaCakes118
Size
448KB
MD5
8ef95a17d8d3acc07a153d62ece3aff9
SHA1
c2fe237d6d75ae4150b03303dfeb9e08a4a16028
SHA256
e2c5f4ab15b3509c17f19a57217a64f9132f736bac8f546e11f35ba126f93990
SHA512
b8a4b36f77a47becae657703c0a8d0b0e703d4fdb012836c09c69a57efeceda5267ffecd8d2f0243be446cb36365ee4234c8736b35d987094c2b81e950f238dd
SSDEEP
6144:z840sxpfU10ovURBVFn17NBVlBSuqaAZei3wy9Ai1zvleBt1Qq3Y51Fr:N0yfUGIKr17NjlBjHAZe+9AYtqu19
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
8ef95a17d8d3acc07a153d62ece3aff9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE