DllCanUnloadNow
DllEnter
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
f4da6d25bc08697db50c08044afe3721_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f4da6d25bc08697db50c08044afe3721_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
f4da6d25bc08697db50c08044afe3721_JaffaCakes118
Size
168KB
MD5
f4da6d25bc08697db50c08044afe3721
SHA1
7b33aee93b2075247716e36569f245409245dab9
SHA256
741bc7288c5a66be6d6ffd9f2e66317099326b346073b8287735d2fac6aba85c
SHA512
4961efe55d686be6f6741d125701e7612d0c4eebe9a036083d0b5dc9fc242ab9ca71fca3cb73e27bbcea6056a422e3caecac7ed77b0a8c929c3cb527697ab828
SSDEEP
3072:pXTwrjsXj6WsUflJ/pZWcYv3k1z+wIzN9siNPKP119D43LcrO/L:RTUoXSUfJZWL+znIzNGWiL9iLWO
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f4da6d25bc08697db50c08044afe3721_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllEnter
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.