DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
bb5764dc22fcbaca6e97417b30ac0877_JaffaCakes118.dll
Resource
win7-20240704-en
Target
bb5764dc22fcbaca6e97417b30ac0877_JaffaCakes118
Size
270KB
MD5
bb5764dc22fcbaca6e97417b30ac0877
SHA1
88131a607a9ce224e6ef82f264b695ac074f8954
SHA256
1e4e3a2a08ddda57cea076a34396f9b3c017fc0fba32b71be32f42db82198c93
SHA512
6cae13d8cf17e03b5b45c384f863834c9bc98b8ffdf2180bd4bbb30182ee647898d023e3431ba266c3589a1b80a2b19d5240b6e7d7cd2e6e072441974afeff55
SSDEEP
6144:7w6PlRbLQupt2fUDR5nUOqoHm502pzS5v0NigYie40zBTzv:7woRXQ6txt5njqo602FSR98ebzp
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bb5764dc22fcbaca6e97417b30ac0877_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE