DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
0b45afd128e1fbcb2d40d7e1a8f13a3a_JaffaCakes118.dll
Resource
win7-20240903-en
Target
0b45afd128e1fbcb2d40d7e1a8f13a3a_JaffaCakes118
Size
63KB
MD5
0b45afd128e1fbcb2d40d7e1a8f13a3a
SHA1
10ac65bd6dfbede6ec5a12fd7975b1208c7ce60c
SHA256
02bdf5399710431a6fb4764e8b9e487ff5b861106409768b0928f2d1ce1dc49f
SHA512
93f16dd1d8036aaed06a1b8a4f20f3236354938761f7cd1d7891f2cd07bf3206ca3e6c041643e210580c38b24c8520d8ce2214655edda363b76f5aceb62fc65d
SSDEEP
1536:54+AOOufttmAHP2LZrDyC7HttKc/pXh0BJU:54+Avul5HkZrxSc/pXh0DU
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0b45afd128e1fbcb2d40d7e1a8f13a3a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE