DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
c0b59d063fdcaddf63edce5cb281e3a7_JaffaCakes118.dll
Resource
win7-20240704-en
Target
c0b59d063fdcaddf63edce5cb281e3a7_JaffaCakes118
Size
73KB
MD5
c0b59d063fdcaddf63edce5cb281e3a7
SHA1
e903c37c9012d5df7859bb60f4fcc450616d4160
SHA256
dca550e89ecab00bb1678d23fca22318ced54fd5af337972bd2b3dfdd7c0e1ed
SHA512
0126f04860447bc3d7a1a4059c4bb027c9c7de5545680c2f47807071e6769c81d36d845dfcb51ebd93a367f68f18c17d809b153dac37d96d8a9c551e12e893d5
SSDEEP
1536:Wgnqwx/nEKJiPjFbtaG3C208m6qvJc6TumsHbP6QVzn+EA4eAdiDznouy8t:WgnBZ0jiGy2tmBTuxWQVznhbcLoutt
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
c0b59d063fdcaddf63edce5cb281e3a7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE