DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
df6acd8d5f671782f2db36a4078153df_JaffaCakes118.dll
Resource
win7-20240903-en
Target
df6acd8d5f671782f2db36a4078153df_JaffaCakes118
Size
5KB
MD5
df6acd8d5f671782f2db36a4078153df
SHA1
b48f4dcbcd7b79ee92680f7dff87223b5303603c
SHA256
6f67923759e78400dd9673b03ecfd7cdf860766cddaee71c5e353c89cac39c1f
SHA512
372c7682f43442bb8a980da38fb95e23095f1b3501270cd73901f396fe3576f022aaa793bd66c5d3e6b3c4c243c6d8bad39a27e7ade60a0708e8ca6c31b81935
SSDEEP
96:dXQ1U9XvODQMj442KKIncINJZ7h6sCpDA:dg+IDQDhsn5XZt6sCFA
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
df6acd8d5f671782f2db36a4078153df_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE