DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
06b9c25e579f64983afd21f814c7ffda_JaffaCakes118.dll
Resource
win7-20240729-en
Target
06b9c25e579f64983afd21f814c7ffda_JaffaCakes118
Size
223KB
MD5
06b9c25e579f64983afd21f814c7ffda
SHA1
e0f281607ebf3d77659adae5afe74512f86777bc
SHA256
bd707523fc0e4db3120aaf7d9effd1ab276250c73e91fc915288e3a7c196a886
SHA512
4165e67e7abe0850b1ade8fabbe68a25299bcd30b4e6149586709e903ece01dd7892d0c20d306677f979c88d805de6df9080b067b41da702657d144994e9e79c
SSDEEP
6144:EQ2D2jiXna6yh90bJTeLegwVaTXZvwh6XAcc:EzD2ji3HReLtOKZlAc
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
06b9c25e579f64983afd21f814c7ffda_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE