DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
bcb8f2abb1ca7880507cf2159e5f25da_JaffaCakes118.dll
Resource
win7-20240705-en
Target
bcb8f2abb1ca7880507cf2159e5f25da_JaffaCakes118
Size
80KB
MD5
bcb8f2abb1ca7880507cf2159e5f25da
SHA1
ee6d502b53dba63d44faf4b091a14627820132d4
SHA256
c0e1fa0152796d4e98d860f58366075d1faef5c1f96a3ccb2d3a7beeff692aa3
SHA512
b28feab56f6b81eb6ce4d37a4764befa3ad0a68c13ab79fc4c1eda267857f69369baddaf43ffd5ac1edf1e280e25d6a9771336a2f827061ce8693391f9e89b95
SSDEEP
1536:o4iBG+1CeHDD45gn4fOfxfveGOE/sBeK6Z+AhAnw0/cvfRMHcwES31yDp:o4ip11Nn4f+xeayephA3/AfRMHcwEjp
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bcb8f2abb1ca7880507cf2159e5f25da_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ