DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Behavioral task
behavioral1
Sample
ead26975a00c823529ab3b491bfe39e2_JaffaCakes118.dll
Resource
win7-20240903-en
Target
ead26975a00c823529ab3b491bfe39e2_JaffaCakes118
Size
7KB
MD5
ead26975a00c823529ab3b491bfe39e2
SHA1
a5700c574880941dfa98977786d2b5612f70d7ff
SHA256
cd478ba42d3a01771c2db4a31bbf3e0ba2ea568da99061eb7c6c306cd1ce87bb
SHA512
097cde84f6c7012f062c6d5e7e34370657ea14538bb69ea62e4f6ef5369bf1a40d1a00214f59f1d9a8cf6cedceca6ac838725d3b0aa072b5f2b2f4bd3cdddeea
SSDEEP
96:IAW5Y+zP6fipw0rgFaFCHmBAGh23jLhttvHOnXDz3UO8ARwkoOvRfX7Xlo:45HpE/KAj3jLXtK/T8ASHOVXpo
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ead26975a00c823529ab3b491bfe39e2_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ