DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Gsm
Ssm
stbgn
Behavioral task
behavioral1
Sample
088e863e9ae3f2fd38b6db8ca2450e46_JaffaCakes118.dll
Resource
win7-20240903-en
Target
088e863e9ae3f2fd38b6db8ca2450e46_JaffaCakes118
Size
8KB
MD5
088e863e9ae3f2fd38b6db8ca2450e46
SHA1
ed47239c93a4b1e7c4f13bca3f53f7006e93af9b
SHA256
c0aa737bd05c00657e2156050ae31dea779de5f5cecee8240656f89ba26c62ee
SHA512
5a8d91ad405c576751fb323c4a2dad2619a20559f2650e734a70fdfc7a1a3a491d74094ea8a8e46b667200abaf9b7afaadc2cb80f89ce98908ac23da2bf733b6
SSDEEP
192:RP/KOwExPjYehVoLfRz74+H6nWeXEoxv6OafQA:RP/KRo7YlLfl4+wRVZ
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
088e863e9ae3f2fd38b6db8ca2450e46_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Gsm
Ssm
stbgn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ