DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
__JafModInfo
Static task
static1
Behavioral task
behavioral1
Sample
a676fc69adc135323106018d73ea83e7_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a676fc69adc135323106018d73ea83e7_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a676fc69adc135323106018d73ea83e7_JaffaCakes118
Size
142KB
MD5
a676fc69adc135323106018d73ea83e7
SHA1
09fa35abc623c0cae2ddbf61e5d792135f2af7e9
SHA256
b9161dc847d6274db41267d39f28c53e41b579b3c91454e688d31fe364c4242b
SHA512
f1c853ddf599ddeeca2ece8589509a8bbba8bf35f3c25e609adf049f328b2f541af38244b5f58345d47d237ca696bbb763de84c0252f1e721f759b1cdef9e83d
SSDEEP
1536:4dRTz1M/c/JeZgl81PIBcUFLGiOSwUHpA4fmnAtu0qngXzjMGRwsqq/niYoIlSna:SZkcmgGpFipfmWqn+Y1rYornLu
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
a676fc69adc135323106018d73ea83e7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
__JafModInfo
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE