DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
_f
_i
_key
Static task
static1
Behavioral task
behavioral1
Sample
2812b237013a5466cbf17a6863dd804e_JaffaCakes118.dll
Resource
win7-20240903-en
Target
2812b237013a5466cbf17a6863dd804e_JaffaCakes118
Size
94KB
MD5
2812b237013a5466cbf17a6863dd804e
SHA1
f27d17eb8ba507f6f98c6e8e14541064ff24c306
SHA256
11cf7fbb1e129b07cc9d7779e287b855e540af909219e57835a745e26a19f9d7
SHA512
0fa93aa79c31f637338406c70058e32179b2aaf698f703646dec5a2ebd677bef91119c507975b5c6714b34a09f86feb580b5abe1074de387e22415b330badc91
SSDEEP
1536:NVBOKokJRdI7Y16d0YlkDOM3/M8F/lbXAQL4figIexKggdHfAJkqLVj:NaR2R2z3lkDOM308FlwQLmxF9kqLVj
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
2812b237013a5466cbf17a6863dd804e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
_f
_i
_key
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE