DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
de2d0b580678dda8a9baf2d7b9639fb6_JaffaCakes118.dll
Resource
win7-20240708-en
Target
de2d0b580678dda8a9baf2d7b9639fb6_JaffaCakes118
Size
232KB
MD5
de2d0b580678dda8a9baf2d7b9639fb6
SHA1
6d2425368aaf77a8fbef578d3893d3130ac7b199
SHA256
70b8eca5c10e9504f418c6e3b73d21d6da260f4198caa76279fc2861bbd71dbc
SHA512
2b9b7c4867d81a13e5f37e677dd8c493596c11e97830666809b9f2627bd16cec5757d571c471ba30d772045b5695a1bdb5b25402c5e9fbd206808260fdf760fd
SSDEEP
6144:y3NhMt1fi7z5DwmUi55bjOePHpUPwBu81TRu6b6c7YH/GY5:y3kt1fiZDwcbjOeK2tTRu6bPYfGO
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
de2d0b580678dda8a9baf2d7b9639fb6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE