DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
b2d8ffb00549382368f4e29f88a385fe_JaffaCakes118.dll
Resource
win7-20240704-en
Target
b2d8ffb00549382368f4e29f88a385fe_JaffaCakes118
Size
234KB
MD5
b2d8ffb00549382368f4e29f88a385fe
SHA1
c2fcbcfff8d5775e3c2526f6f7edc0fdb9b675b6
SHA256
b0b76c49c3862785b378de5e03842ddd5f984ec5a00da25e77e82043b009fc9a
SHA512
c8efbbe4b8c23e34002b7b18624b3cf26af5c1d490eabb6fcf9ae3f24bf7386f77e93ada28b1afd788ed317bddb94c78d9b66f03452f13120607631923fc3fc8
SSDEEP
6144:tqWGMxiZ9N1rsF6pQmhnktrCTQM2WQIqwhjbED6dH5ETdRnGhBZYmoZ6I:1GMSxr46emxktxZInjLQSpYmoZV
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b2d8ffb00549382368f4e29f88a385fe_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE