DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
ef25a53de9c19cfadc02e907119530d7_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ef25a53de9c19cfadc02e907119530d7_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ef25a53de9c19cfadc02e907119530d7_JaffaCakes118
Size
51KB
MD5
ef25a53de9c19cfadc02e907119530d7
SHA1
b100f10a62cb852cf790174e3e70077e31984f9e
SHA256
f1f84d87df9df8fa415f656a0d54209542cd461e936ad18f5d9c9ce2ff544bbc
SHA512
d133cea8276fa254177b115e2bf3d2810ee5deb46402843452e8d7dc392edc39fafca501c7a8c1f865bf519a70e69eb85515d490af2ef7bbf14dacd491c53db0
SSDEEP
1536:3eX/NI6KKQYKmpa6VaoPuxgOnjYeCnouy8H:y/N8m84FInjJaout
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
ef25a53de9c19cfadc02e907119530d7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE