DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Behavioral task
behavioral1
Sample
941a821c116d4f17ec49018ae3f77420_JaffaCakes118.dll
Resource
win7-20240708-en
Target
941a821c116d4f17ec49018ae3f77420_JaffaCakes118
Size
8KB
MD5
941a821c116d4f17ec49018ae3f77420
SHA1
45a3833bd053d5302b1939ebd4a2035991c35914
SHA256
fb65124f4c14f2e224ee9b29a2d8d2db5fdae084a399f135300406bea874173f
SHA512
d6c1c5b47dc77e39abc9646c1d36693ebb0da43e9dfd413443958175d9ad54edc22d613423a0e1bf08b4c33609d4eae86827397603fabb2239de11bc7b6e62e6
SSDEEP
96:i7/Bt/5JttU5yW2cwG87OynKP2cfy5SscuSoxPVRCwPPy8bo64YoWmtDTch9denc:i9t5tUay/y5vxbvnXbtoWmQAc
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
941a821c116d4f17ec49018ae3f77420_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ