DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
InstantAccess
OpenAccess
RegisterEXE
ecnhe
eswhe
euhwe
iedisco
sds
Behavioral task
behavioral1
Sample
ab17a214d6ac812a637d1f23bc1f1766_JaffaCakes118.dll
Resource
win7-20240704-en
Target
ab17a214d6ac812a637d1f23bc1f1766_JaffaCakes118
Size
77KB
MD5
ab17a214d6ac812a637d1f23bc1f1766
SHA1
dd47e7de053c486d5a59c562dfe153a39e503118
SHA256
f3acc64234715cda90b046f2d7279096e25d97958d2f6b0db7c8d28412f8fa1a
SHA512
51b738cd0ab2cebfdeeeb698cb2cc1871b9e9fc446a717747b5a57f47d8fc0233bb8847ad643d7e1c5fb753c0c2d89a65bba8d66347c8b5ed103aeabd48210a6
SSDEEP
1536:8PVT/ss4hPR0mt0yTZbmMNcwEad92B16HDvGPxCNSC0nIfmfhF:8NT/ssmZ92yTZEwEaK6DvGKp0nIfsF
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ab17a214d6ac812a637d1f23bc1f1766_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
InstantAccess
OpenAccess
RegisterEXE
ecnhe
eswhe
euhwe
iedisco
sds
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ