DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
InitModule
RunMain
Stub
Behavioral task
behavioral1
Sample
df51aee89027399f01e13d81506c5c9f_JaffaCakes118.dll
Resource
win7-20240903-en
Target
df51aee89027399f01e13d81506c5c9f_JaffaCakes118
Size
32KB
MD5
df51aee89027399f01e13d81506c5c9f
SHA1
08cd1a109a7ed7dcf7025fb9925ca69a301b8637
SHA256
cc27353293cfe1ab780cd94e62b394107a58a9311dc4d59764b59b9a1be7802c
SHA512
c04d300852b741aa6d5f766099fa350979f5f0c3d93fafd65b12b2e9ceb355e12089f037cd75b484df648ebba1c08d03003df2b5b5d3fd32a8ea8ea74b39f58d
SSDEEP
768:dQO4N66rB65oPLo/FRGifb8rnf1FRSAs+DCp:Sz66F7KWnEjIC
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
df51aee89027399f01e13d81506c5c9f_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
InitModule
RunMain
Stub
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ