DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
d0a69253b443ace576641da441fa1bfc_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d0a69253b443ace576641da441fa1bfc_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
d0a69253b443ace576641da441fa1bfc_JaffaCakes118
Size
50KB
MD5
d0a69253b443ace576641da441fa1bfc
SHA1
9cd6c45770e09d99e9c6377a0ce0b9448097d8fb
SHA256
74bcc796ca63a1fbc81437e22dc7c20b208042817c4b56e2709bc4abd4b89e22
SHA512
19de6ea6a1636454be0e3e3dc4cf20aa6199662db36799667aa24a6212ffc0cf2ecc4d1943777eff93d338cf491e8651c45dc7f14973c7f142769deaaabb02df
SSDEEP
768:pDq07toZk626CUgYvfIKsLrqu/UwW0qLSBVBGDCkLBXdrfHqUp/PnbcuyD7UD:Ietofa6o7WTSPBG+6tfp1nouy8
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
d0a69253b443ace576641da441fa1bfc_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE