DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Behavioral task
behavioral1
Sample
abd80d8929746e96c01d1cc7fc0786aa_JaffaCakes118.dll
Resource
win7-20240729-en
Target
abd80d8929746e96c01d1cc7fc0786aa_JaffaCakes118
Size
7KB
MD5
abd80d8929746e96c01d1cc7fc0786aa
SHA1
a2ac8b18f9e94f1e0d7e1a064af271b1e49cf81f
SHA256
3bc5a61b969e3ac986ec7d9f3fa7951c1b46091b6b03d5d6aa03fb89047d6f93
SHA512
7150e5f8ff337e10be82980c74ccfe12513c6ba5cdec07f353f2f0992cad5fd8e212590aedc748ab027f9c522b329e02442b187a01394cc12fc98ba58e4ef0e0
SSDEEP
96:kiTCN7uLw/W6dltcH37wkivnBZRDplghWg2hQUXA/yXS48XUrHoVK0uyxeRVC:kNBuMu6iHrqZRDp2h67GmcUrHLUxOC
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
abd80d8929746e96c01d1cc7fc0786aa_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ