DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Static task
static1
Behavioral task
behavioral1
Sample
c1ac9d8d29ecd164b43fdc7820487c23_JaffaCakes118.dll
Resource
win7-20240705-en
Target
c1ac9d8d29ecd164b43fdc7820487c23_JaffaCakes118
Size
31KB
MD5
c1ac9d8d29ecd164b43fdc7820487c23
SHA1
0a24bcffd6fe396503e4a8f7bb9746d04b9905d3
SHA256
0dc66695a2cdffbe61abfa77e5a89545128a597ca5fcd028a69b0fcad896c3a8
SHA512
6018629986a703bd71e17848e3e308f584f22bea3f436684aa8dc9431fd350ecc3f4cd902582b87e540e50d1f28a8b7f17ec350100971865e100567726e9fc4d
SSDEEP
768:lqMnIGjOO/56x3irFSRL5bKg4u+M2lQoXRne0UhjSfp/NyYW:lqMJj1R6irFSRLlKg4kzoXt1U8TM
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
c1ac9d8d29ecd164b43fdc7820487c23_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE