DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
acecdf26ab010b94bb884f0107f0855e_JaffaCakes118.dll
Resource
win7-20240705-en
Target
acecdf26ab010b94bb884f0107f0855e_JaffaCakes118
Size
963KB
MD5
acecdf26ab010b94bb884f0107f0855e
SHA1
218e6c951af3069a78291b8a92922e2017bdc48d
SHA256
b16c8c438e081803e97ec239e0ff5e2c40fc599055d210508b81334d90c4d528
SHA512
97f5bbd77107e497f6d9b7b229c771741f929a8c43613fe5f24dc6fcf6a18e65a29fe0a479b76bfb0a66720a89d22e7512d0fdc7934d43a2d69d649d8f62f1e8
SSDEEP
24576:4Db9kiYPA9lzM4V/a3wS25KmmMjYbkMcDKlHYq+kx9:0kR+LaJ2pYbknKl4PO9
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
acecdf26ab010b94bb884f0107f0855e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE