DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Behavioral task
behavioral1
Sample
db70644f0b3eb37d8c640f0f45d89af1_JaffaCakes118.dll
Resource
win7-20240903-en
Target
db70644f0b3eb37d8c640f0f45d89af1_JaffaCakes118
Size
9KB
MD5
db70644f0b3eb37d8c640f0f45d89af1
SHA1
70c8839440cd269a778989e02326d9170cdd7bdf
SHA256
fcc00df8d1a7d70f73cd73008ecfad4f5a9e5b013959cea3da990e28a74b25ca
SHA512
d9af53fb9586d50ab9ebf358cc2f54dde54db777c37ebc50a979b59cbfa1f6b8c93e82d1b5a82983e1d69700543c1d1f65c1720833bb92025316380c02ff30d5
SSDEEP
192:+c4qUxneOUPeyh9DS4vULbjffg948FaNJhLkwcud2DH9VwGfctfXa:86e0NS4MLPfeaNJawcudoD7Ul
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
db70644f0b3eb37d8c640f0f45d89af1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE