DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
d0a12e88295970335f26d6067cdcbbb4_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d0a12e88295970335f26d6067cdcbbb4_JaffaCakes118
Size
234KB
MD5
d0a12e88295970335f26d6067cdcbbb4
SHA1
19080731ee102be1689ba44dab127934b9506119
SHA256
6c577797d1402e7fc2be17db49c93612f677e3870ffe11485bc2c2664f594d13
SHA512
d8a1f615dd976f35354af46381660f3c3966e0cf4e3ea9948e78ef1f96450260bd0c91f6bab48db994d78c1f2f452afe848bc8fd414bb8b15bc66fea4e9ecf1d
SSDEEP
6144:63NhMt1fi7z5DwmUi55bjOePHpUPwBu81TRu6s5cNJGf:63kt1fiZDwcbjOeK2tTRu6s5WGf
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d0a12e88295970335f26d6067cdcbbb4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE