DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
d388afcf523d5f80356a34eb33b0658e_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
d388afcf523d5f80356a34eb33b0658e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
d388afcf523d5f80356a34eb33b0658e_JaffaCakes118
Size
273KB
MD5
d388afcf523d5f80356a34eb33b0658e
SHA1
d6ecb629aee2c4e1131d491cbaaa4cc7b09fa9fc
SHA256
01773f3a05bc41c1a15cef6997bd1016b728eeb721063ce608e18db227ccf253
SHA512
0642ada75cce8f464cd59a1b2aeb7d2e00eeccfd2fb2e7cdd8b12ed1355a77f46656a16db028b206aac1bda3801d6cce73436574812b7933f67327abd510cbff
SSDEEP
6144:l6UaMjDA7sYlw9oHhBgqIAlUUIEDLqJRjbpC:l6Kk6gKXA+UIvj
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
d388afcf523d5f80356a34eb33b0658e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE