DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
dbddac47bb2b2cf6c759fe6b377480e3_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dbddac47bb2b2cf6c759fe6b377480e3_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
dbddac47bb2b2cf6c759fe6b377480e3_JaffaCakes118
Size
51KB
MD5
dbddac47bb2b2cf6c759fe6b377480e3
SHA1
cf47c193e88e05a9f587d09b3da253ab858041e7
SHA256
4b2343f62c3429e3860ab174f55c0816db6041a991faa872c7696deef7b189cb
SHA512
f5af0e097e552483875bf1a854a8844dd31b0a0f995079df6d4e660f5cefe644e949011c7f84350a7e83cf31a89895fd9fd4f93032a5687fc485c6ab3f2f5b9c
SSDEEP
1536:PCCwt4QQ4plyEnUox/qk4zbO9IedIfnouy85:PClPUoxybzCWzout5
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
dbddac47bb2b2cf6c759fe6b377480e3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE