DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Behavioral task
behavioral1
Sample
bc7ea1646300ab4a4d2dcf3ce5db626d_JaffaCakes118.dll
Resource
win7-20240704-en
Target
bc7ea1646300ab4a4d2dcf3ce5db626d_JaffaCakes118
Size
8KB
MD5
bc7ea1646300ab4a4d2dcf3ce5db626d
SHA1
ca9588de49e274e68005a55ebebc1d65d76c1210
SHA256
fcb0b88c8116e6966485d28e65a9323b32aed0ecb413c2210ebf341a1ea99fac
SHA512
6b8f975387b3fa99284c1b3a1e73e2c7ada08b1ffe4195ef004b9aa0b1470789f189fe8c4b429721f2084ad523f21b14bed0c9613b4a000be71c8b40979fc98e
SSDEEP
192:Y8g7MGFUqMIMjhJhQSeqs4FXzb0G7pxcroj+hYu:Y8eM+hMIMD9b0oxaoj
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bc7ea1646300ab4a4d2dcf3ce5db626d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE