DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
bb94c1f1c7f35476b272073d241ab866_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bb94c1f1c7f35476b272073d241ab866_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
bb94c1f1c7f35476b272073d241ab866_JaffaCakes118
Size
247KB
MD5
bb94c1f1c7f35476b272073d241ab866
SHA1
b223b5b8467639f82a4c6ab2119e555989725ee1
SHA256
2acb689025c284ea33223dde6822b21ac0954b371a1faaa50e3d0f32b21bafce
SHA512
55f7878221a64e2e22916cf41736ac3bdabc670de2810c0e1b708ec5620dc9f9ab62696490b4a27a21b5fbd335b6c8cdf5411a16a4665a850363be75f44eae42
SSDEEP
6144:tBa0NhnhqaspqRr4ywzctvGHV7RhuG1n6voLW3:tHnhqa7mzctOH5ru269
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
bb94c1f1c7f35476b272073d241ab866_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE