DllDefine
DllRegisterServer
DllUnregisterServer
DllWork
ServiceMain
Behavioral task
behavioral1
Sample
dac6009b084d106b163cf13a2bbd4ca5_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dac6009b084d106b163cf13a2bbd4ca5_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
dac6009b084d106b163cf13a2bbd4ca5_JaffaCakes118
Size
116KB
MD5
dac6009b084d106b163cf13a2bbd4ca5
SHA1
50a47c64475af5a34b32cdc615b1b9ffe13966a4
SHA256
2e527bbb92e297b5bbe173d9c268c83f06c1268482903dfa27a4669ba954cdb9
SHA512
8ba5975ab23eafd18b81e32ff7da08d3dac4c6870ca92d0b2dbc85436e9a1e1851cb59a21ce79dbcd004d552995d6f8f793981ef39d6a2df868feb44da8a64cf
SSDEEP
3072:+6yOW1YX3DXOUSPfyXsFs0xaDlSFLgCY0:+nAaYsnaDcJgCY0
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
dac6009b084d106b163cf13a2bbd4ca5_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllDefine
DllRegisterServer
DllUnregisterServer
DllWork
ServiceMain
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ