DllGetClassObject
DllRegisterServer
Behavioral task
behavioral1
Sample
afb9a171f7e33bce543890002f1b6200_JaffaCakes118.dll
Resource
win7-20240708-en
Target
afb9a171f7e33bce543890002f1b6200_JaffaCakes118
Size
120KB
MD5
afb9a171f7e33bce543890002f1b6200
SHA1
fdfb7fdc5baac72d0fbbb56bad8557919fe45a50
SHA256
e38c2e45ff30490eed89324678b391278b5be97c74ddf5870ceaa1c9982a7d78
SHA512
e2a6d1c8389766004af069f7b9fa81500f6d2ecdef332ecc7b70941316287468270d23e5a70c5745d96ba67383cc2c9bc8b08e3fb8e2b3359792f119130e1309
SSDEEP
3072:nZKqEZzLUj4bn9ACeWdByNF8V6xzFGc3YvyHeASe2lC4QdY+d:ZK754Mb9AC1SS6HGzv1ASPs4SYu
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
afb9a171f7e33bce543890002f1b6200_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ