DllCanUnloadNow
DllGetClassObject
Mollkab
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
Behavioral task
behavioral1
Sample
a7559759e0ea8141d7e6fa877372b3b2_JaffaCakes118.dll
Resource
win7-20240705-en
Target
a7559759e0ea8141d7e6fa877372b3b2_JaffaCakes118
Size
96KB
MD5
a7559759e0ea8141d7e6fa877372b3b2
SHA1
bbc1406d6ea030b7445f6e73732995d5a0ef686a
SHA256
28926e09c831808131f39a42352ec9c9e64574f7c99f0760cd639f056b9141b7
SHA512
d9904b8747c84b62c9015a79f4431f8e43961eea4894121d29fb1732b6738bad60020b67b1e8c5d1a1a23f4c45d24053d08d67189bde7744c3df05851543e4e8
SSDEEP
1536:GXLwtq0c49MKioFjSz1UFLE/dW5MMbKl89h9LMTlp/8zWqlLqw7t1FVSr77Gnouj:GXLwt/FiaU1Uq/dWFbNr8azD7VS372og
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a7559759e0ea8141d7e6fa877372b3b2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
Mollkab
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE