DllCanUnloadNow
DllUnregisterServer
Behavioral task
behavioral1
Sample
2a060f7e9d117de395bf5d41f40118c1_JaffaCakes118.dll
Resource
win7-20240729-en
Target
2a060f7e9d117de395bf5d41f40118c1_JaffaCakes118
Size
27KB
MD5
2a060f7e9d117de395bf5d41f40118c1
SHA1
27e40215d9e0df9463520a159d81c505b487d2e3
SHA256
91ba2b113032e11cfab2ee77bc9a709d8dbf824ea5781348ab7ab189cb2bcc07
SHA512
e00e108cf5b71f5262acbd0250587e14a188fc36aaf8963dc8f87969f3899661d58727919735024b2ab04806f07d7977e2989706cf8215401bd2f6350646f2f1
SSDEEP
384:alZhEkRs0VIVSXQG/unxfPDFdZHWUz8G1Bo+QIDkHdMIWtHi07/RL6mQsS1DZ2/D:aEkRz6MX1oLPWUzlBPG7MHiiJ0au/Fgh
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2a060f7e9d117de395bf5d41f40118c1_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ