DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Behavioral task
behavioral1
Sample
a6a48f8ef9abf447b618cf2d7d8e5def_JaffaCakes118.dll
Resource
win7-20240704-en
Target
a6a48f8ef9abf447b618cf2d7d8e5def_JaffaCakes118
Size
10KB
MD5
a6a48f8ef9abf447b618cf2d7d8e5def
SHA1
9ecfd95041b0cff5b6be50ec544920082903cf60
SHA256
14cf408c9570f11a5fc6e54d607372fe754eb273c879dafd23b6740d47daec7f
SHA512
997b6a7732520bac7ea4cb0d8fab8c67b6aaba9684d32315cd78ddef84d6723b7fb5c0cfe8ea6b08f1314d456222a042a29acffe23e194337f7e3b94f626fa39
SSDEEP
192:AVhj7L+573sTnyE73RSfa4olRe9TN/FSHCFLFaNJhLkwcud2DH9VwGfctq//:APXL+hMyEDWxolo/+CnaNJawcudoD7Uc
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a6a48f8ef9abf447b618cf2d7d8e5def_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE