DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
ce271e88617ca7b71c49efe852065737_JaffaCakes118.dll
Resource
win7-20240708-en
Target
ce271e88617ca7b71c49efe852065737_JaffaCakes118
Size
163KB
MD5
ce271e88617ca7b71c49efe852065737
SHA1
1fe4001838d9257b062233df8119f271d59c41e2
SHA256
06b69dc3c5898fb73c7a57cbf4748dcd490af2d27989e1f1fba1bb1994305e4a
SHA512
220318cf453e38ab0340d022c0eccdfe0141a18f377402f0f82d4e7536962c845fdd52dbaa850fcbb350fdfce1d3ee2f098894bffdbef6683356bad3e1edbf28
SSDEEP
3072:IgGKe4C/vkgHaKfY2uDGxW5wo9loVF1rYfB1bMrto/v8aqlD/k7FJrbNL2FzX:/e4I8ZcuqxqwS0855Mr6X8aFtxKF
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ce271e88617ca7b71c49efe852065737_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE