DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MsgHookOff
MsgHookOn
Behavioral task
behavioral1
Sample
0f776e9d88a382f34f38fb075d79851e_JaffaCakes118.dll
Resource
win7-20240903-en
Target
0f776e9d88a382f34f38fb075d79851e_JaffaCakes118
Size
23KB
MD5
0f776e9d88a382f34f38fb075d79851e
SHA1
595a3bae0e2b3e6b26cbb183f4d622ec05760f90
SHA256
edfe07970f24354e30833d5cafc0cdfce1571a4c34971a076b0803f069b4a444
SHA512
a26668be185ea691e8b92d2e72686d24414912b38f7b587baad0694d2c4e66c6a356848a82600a174e67309da470fac6d96f3a14f2ca4e35f90d00cd0098e4e7
SSDEEP
384:ZcxHRaFojkyz5k4jrE+z2VnWbnI/7Y/NbFx1eWEKhA8oI2R:+Hvkyz5xv2VnW08/1/e3bR
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0f776e9d88a382f34f38fb075d79851e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MsgHookOff
MsgHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE