DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
TestFunc
Behavioral task
behavioral1
Sample
e0521a23f8051773292b20518af149ad_JaffaCakes118.dll
Resource
win7-20240903-en
Target
e0521a23f8051773292b20518af149ad_JaffaCakes118
Size
17KB
MD5
e0521a23f8051773292b20518af149ad
SHA1
d6169b984f877c4809dd24e5e4a26a2ea5b6a5bb
SHA256
e3072c879eae5e6cf923bd8db0f83463b509aed07003d5244f843b4d83f7e9b5
SHA512
cb71293d546ffe9bb2da4aabeda140a004fd59e389b33a2b5539e1cce70de3b06e8699d007e93fd2cedc0dd9bb5a081bd4327865202c1dfb4a253bca3735a832
SSDEEP
384:NEDVanAjh93zEb9Xt47Y/P0cGpyp8QqHxXeusOz:NEDVT93zEpXm03OpyprGLHz
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
e0521a23f8051773292b20518af149ad_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
TestFunc
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ