DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
de2fbcdb47411cb051fb0a6fa7138087_JaffaCakes118.dll
Resource
win7-20240903-en
Target
de2fbcdb47411cb051fb0a6fa7138087_JaffaCakes118
Size
224KB
MD5
de2fbcdb47411cb051fb0a6fa7138087
SHA1
c657531c5c93e36e63449121569bec17b6a9a3b0
SHA256
37fc0be5e5f16c6b99706d322b49548a40cb0b1292615390d4d161bc7bdc4f0f
SHA512
b50ee9b664503f2aff22ab253614e76702739f4c260b651f417fd1512224dc2dff72e286f06b9d08b8665f21dadbe90a83c22c80b7bacd2e0a6a5be9195b0fe8
SSDEEP
3072:ewx6y/vq72fvYI6Sm1CDS2cG67V7pi8L+ZFSDd98A665HFqzKGyrWxMlsXXwdi1M:ewx/C2G6SDG6dphYB365sryrXlsnJM
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
de2fbcdb47411cb051fb0a6fa7138087_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE