DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
c10d5793550cb73097cf69e7fcce018c_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c10d5793550cb73097cf69e7fcce018c_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
c10d5793550cb73097cf69e7fcce018c_JaffaCakes118
Size
9KB
MD5
c10d5793550cb73097cf69e7fcce018c
SHA1
bd6e4f3c0c5698c6b93fa2fcc9f1d3a318974167
SHA256
eaedb7b588bd53237e8a5ecb1a579b92b06004ae2f90c455d22a38ef80e5e7a3
SHA512
a0efa63f0bcc5f201d72e5c277ec5eab12a865fb673024a0eb6890a3a0eaf0f60438d5cd3fa42859a2a5047d1b8cd4accda8dd84ed1253079d9e1c99f616d09c
SSDEEP
192:IaJQlHAnVJt1RZ0NfQ29oifKOXfVO/k9a+7xtRIQeTJNdA1:ItSzt1RZ0N429oiLXU/kZNreTS
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
c10d5793550cb73097cf69e7fcce018c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE