DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
1405a5c46f5d69feea3c8c93e0df6914_JaffaCakes118.dll
Resource
win7-20240903-en
Target
1405a5c46f5d69feea3c8c93e0df6914_JaffaCakes118
Size
214KB
MD5
1405a5c46f5d69feea3c8c93e0df6914
SHA1
6762f05d9f04fb4f5297e28c9395fc329c2f6a7a
SHA256
c9966dfa25b39922b33f548096169efde386c6bc5143c53517aea1133d8a35e8
SHA512
5f5e3b935a49a7d19439e90abbc93e37c9380defad3dc961f3b6d4def12a0b5b2b934c8cd52a0a6c119aa960aeba0d2072d09a5ef6e200c8b40e11bbcae17023
SSDEEP
3072:/Hv5L8djQUixAUio3yBijLsJowUJqv2k7bEpbH596ABUM8+Kot3i/PYnvQoutC+:X5L8xQUiEuyBijLGv2sIk9WUxoSC+
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
1405a5c46f5d69feea3c8c93e0df6914_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE