DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
c07ded43428f56aa1c84f3980ba10d59_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c07ded43428f56aa1c84f3980ba10d59_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
c07ded43428f56aa1c84f3980ba10d59_JaffaCakes118
Size
50KB
MD5
c07ded43428f56aa1c84f3980ba10d59
SHA1
5251be19aab6cf32198a1c25dd06fe15c8700af6
SHA256
a3434657369c310b0c2dc2de039d4a46e79c1f2a7252418bd2a14a13076e7dd8
SHA512
f0d6412989692ea7b173a627d7ec6d9b1c896273efd3fd1d2860d57c75f8d5d3f951d416a4b8229232bff749865f0bee82b4ba955fcdc4ab298e4adcef2d7686
SSDEEP
1536:WR7DkSrcD2dnH4mYfq3BoWdyjH3XvonG1uPnnouy8L:WRf7wSdYliRo+eXXmG1InoutL
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
c07ded43428f56aa1c84f3980ba10d59_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE