DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
b4fac9c02c39de8870461ef25445bcb7_JaffaCakes118.dll
Resource
win7-20240705-en
Target
b4fac9c02c39de8870461ef25445bcb7_JaffaCakes118
Size
307KB
MD5
b4fac9c02c39de8870461ef25445bcb7
SHA1
d65f50317bec69865fc75b525fb0ebdf18d02120
SHA256
cd35f1b3b80bfc9863645b1c0829855dc358eca45ade14294b01b6c4b176bb9b
SHA512
be004984b5300d8e450c6b4a46219ca44ae7521da36082120e2da36e7e56fc2eab863d4acb7a97246e14d2be9c3215b7a9a29b9aa8895ef34791996716838cd1
SSDEEP
3072:4B1iYDyu8ctFRPVwBghoBwSRWGeHKEbH9QP89Qa62hyvwVsBV8kp5KLxZHRBrN6:4B1LrD+KoOZGIBm8GmyoOHp5KxD6
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b4fac9c02c39de8870461ef25445bcb7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE