DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
aa4ff135282d8f411d7e472d9ce8371a_JaffaCakes118.dll
Resource
win7-20240708-en
Target
aa4ff135282d8f411d7e472d9ce8371a_JaffaCakes118
Size
43KB
MD5
aa4ff135282d8f411d7e472d9ce8371a
SHA1
7db5e54903b80df782d27a88a2c6778610be38bf
SHA256
ac48bccac01293354e1049dbde82fb3f9782ac9db77381a7938dc382ee71d138
SHA512
f74edb33a6e700e643fa7686511f84599a4e9f71811907fc85e481e306de3544624acd12d5d7953b09c8c1350867c632facfc7d61eb1005098f850c749a01fe1
SSDEEP
768:cXoiUXowhFacYf+w6Kiqx+TApPsGsBM8J0qJXqE6AinWBkoG7:cXoiUThgf+/vO+TAppohJrx6JnWBe7
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
aa4ff135282d8f411d7e472d9ce8371a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE