DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
d6f07e1794f6ff2e3e556d728389110d_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d6f07e1794f6ff2e3e556d728389110d_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
d6f07e1794f6ff2e3e556d728389110d_JaffaCakes118
Size
206KB
MD5
d6f07e1794f6ff2e3e556d728389110d
SHA1
cdfdd1afe91e17d5d8fc40929fa73395c200844b
SHA256
2067ccfd09a5462d738231e0d3a77025c5951af2d2de8419c2a9395deed8a75c
SHA512
cfb8e00bfcae44b63a01618e4ad48f3c92b9c2fefa73ce62977aefc8cd9c2eb308f2eb122ddd6a881fc58811f79f02b9814340396ab06e69737f37b99fe7a3bf
SSDEEP
6144:qE2aE9B/Mpkp01/re7dW2t2+kvj7eCNxtyd:waE9B/Mpaq/j2tj8j7e2x2
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
d6f07e1794f6ff2e3e556d728389110d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE