DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
b7271236f76ef377c22d3bc0e96e450c_JaffaCakes118.dll
Resource
win7-20240705-en
Target
b7271236f76ef377c22d3bc0e96e450c_JaffaCakes118
Size
117KB
MD5
b7271236f76ef377c22d3bc0e96e450c
SHA1
844a9578cefe7b493840e20e0e142a5635e4dde7
SHA256
f5bc94a14de09185a1ce62d3a6f07a353b8db8663a4d39c2f829c68c5af54c71
SHA512
feb9f2cd14aeabeec7c85c5df8095d7f38294eb9defda74ec802b0558bdbb710c486fa9296ebb385cde4dc47aa5bc0c99c1644b5590379fab91928a7b0809d7d
SSDEEP
3072:AHuDoU/YJF8zOVHkooyViKFcpnq8EHaqHpqxE2XsOomO:nDoU/YJCOVEooyTFcpq8GxHpqx3XsOot
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b7271236f76ef377c22d3bc0e96e450c_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ