DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
be16ddd4db363568b1d86c533071f8c8_JaffaCakes118.dll
Resource
win7-20240729-en
Target
be16ddd4db363568b1d86c533071f8c8_JaffaCakes118
Size
55KB
MD5
be16ddd4db363568b1d86c533071f8c8
SHA1
8d169901adc127ca19e9304e088f8877e1d9e26c
SHA256
e4fdc4b41c99c16b04181125ed4157277136d470eabb272937e0f7c224484449
SHA512
0aa23e7467e090772da15be247edb9542bac0f4e22e35cd2ae7ea7947bb16b1e8859f9a62d38b182c4f50fed428d6d15ca0b23390396b9ca0634fcbce09b18af
SSDEEP
1536:JUHBHNLu5wixriTAfaF/7/hS12KwUGTcSArjJiInouy8:C5Ju5wsiTMaF/7cwU8ApFout
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
be16ddd4db363568b1d86c533071f8c8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE