DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
_f
_i
_key
Behavioral task
behavioral1
Sample
a6663a959cfca40fd682b03e47db4099_JaffaCakes118.dll
Resource
win7-20240708-en
Target
a6663a959cfca40fd682b03e47db4099_JaffaCakes118
Size
91KB
MD5
a6663a959cfca40fd682b03e47db4099
SHA1
699d0a073270e96fc9d6efabebce30b2bae637c4
SHA256
c93bb7d28314f4c9124104201b494b0eff0d11127881ea529d9d4897371f2283
SHA512
d0df19da32626cfa71341ad9ded40a215d1655d19c2ea05520aeb8d792a78b683bd00bb7c5c9eaba1a217b513d343989f7eeb10e8db6f43a929937e227b0ecbd
SSDEEP
1536:UWwkvgQPwdQIPAgruZtI6Cz9QfS4W2S7hTD3RtNfTALPwldhNyjHidbw4BYFfn:UW5vwOsWIpQfS4+NH3ZEEldhNfdbw4q/
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a6663a959cfca40fd682b03e47db4099_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
_f
_i
_key
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE