DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
be7301ef19123f2324fb7caa77092934_JaffaCakes118.dll
Resource
win7-20240704-en
Target
be7301ef19123f2324fb7caa77092934_JaffaCakes118
Size
233KB
MD5
be7301ef19123f2324fb7caa77092934
SHA1
5ec45db11b3bcf6390049d60a0f8f4754a4ffb89
SHA256
7f711f0d128b65e09cde223b02ef80bf388cae8a461131a74f6e83de7a1d17da
SHA512
a9fafa284dd7158cd726cf11e962a83ee14cdca4ddfcdf1ba08f7f132e7b1229f863bf7653e90b8129f28525f7ea8ad12fa6f7247ad286e69643e6f91369c570
SSDEEP
3072:ml3MLKyBG3M4MTAiIunvfQ/twcPVwmFFUmSdN91vSv7IJniKzHz62M6B8NRDTDBR:Y8OyBG3x+g+cimSddv8I62/B8NBDB
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
be7301ef19123f2324fb7caa77092934_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE