DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
calloc
free
malloc
realloc
Behavioral task
behavioral1
Sample
b9ca3dd2cb94b25fbec2eed7a3ae06a9_JaffaCakes118.dll
Resource
win7-20240729-en
Target
b9ca3dd2cb94b25fbec2eed7a3ae06a9_JaffaCakes118
Size
24KB
MD5
b9ca3dd2cb94b25fbec2eed7a3ae06a9
SHA1
29fb95e9c98597e4dabdb6dfef4f48f5d5393182
SHA256
ce3fa26d3d37d999d73636d4c9dcd4bbdf03a37e58927ae71769eee6a6eff5d4
SHA512
7a801ed803c94d81523b5e49c5e3a5c4a2063df29152f2e98a3d4c74b648e8ab2b51a3751f0ae07cf1b5acf7e0ca3d51b4b023451b71b707fa3f7e8d2c8a3f79
SSDEEP
384:CsPabKjSJTRVpl12UE1OB0IcWyk7pG16aAZvCzdfZ4Gts9Vxp:CscnVH1y1w5cW5o16NvC9SGsVxp
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b9ca3dd2cb94b25fbec2eed7a3ae06a9_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
calloc
free
malloc
realloc
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ