DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Behavioral task
behavioral1
Sample
a69e0cbdaf837bc41cc0a10c94d19f6b_JaffaCakes118.dll
Resource
win7-20240708-en
Target
a69e0cbdaf837bc41cc0a10c94d19f6b_JaffaCakes118
Size
9KB
MD5
a69e0cbdaf837bc41cc0a10c94d19f6b
SHA1
39e0b3cafa7aae43697cf6f7d1356b7efe155bfc
SHA256
9ae97542b61abaff92debee2b113192d1d7722fa08f4dd360d105882dea00a67
SHA512
fd932bfbe55b8a211d70efcd1976d89a9995bb7aeac1f9a58bcb9ce71dcac3639e9e64cf7a0a69ec4605ded52c674f973243dca326cf8531b5d8527c0d413b16
SSDEEP
192:fVfXe+06GxUS8bRmeURHTiRy/FaNJhLkwcud2DH9VwGfct7EX:R8fW0kQaNJawcudoD7U
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a69e0cbdaf837bc41cc0a10c94d19f6b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE