DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
0d842d34122c4e37a0e4fe78e4170418_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0d842d34122c4e37a0e4fe78e4170418_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
0d842d34122c4e37a0e4fe78e4170418_JaffaCakes118
Size
272KB
MD5
0d842d34122c4e37a0e4fe78e4170418
SHA1
2d9931d72f08930411190a09fe8fa113a452a69e
SHA256
db503e9f7682ad85e8cf6826012562db3c9a8268f52de1d3a279db15841b1395
SHA512
15b4ad816298295fed3bea2aeaeb62318d24499cc9db5975fc5014c337064e68e3b4b1e3c12b6168bdd1f4890b531f77f16a214873a4e01e7b07b57c7b03541d
SSDEEP
6144:GjxVKBLQHMFVI77zVDBBGlcxELdo8qjpwgWE:GdVALQOoBrGlXLnqjpwtE
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
0d842d34122c4e37a0e4fe78e4170418_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE