DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
2ceb0c5af7ae0aa472fb9248aa9ba829_JaffaCakes118.dll
Resource
win7-20240704-en
Target
2ceb0c5af7ae0aa472fb9248aa9ba829_JaffaCakes118
Size
78KB
MD5
2ceb0c5af7ae0aa472fb9248aa9ba829
SHA1
cac242665e028d0513a25786694a095162883cc6
SHA256
5a27ed6400d7132bb7f0a80d032b313fdc8af563fc4dc9468147ba4a1d7799dc
SHA512
615cf820f3e20812bf7a70b83f5ab1ea408de3b446f19b459eb6c60aeb444c09a559818cdd31f9d9464fa8d7a2cc0f987bbd80554ba39cc57d35a3609f1ff10a
SSDEEP
1536:6HbXYzLoeqwUCOBiPyxU8XzGWmHcohzSNPnRDTBhnouy89d1HY:67AseCE8KFHrzAP9BBout9d14
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2ceb0c5af7ae0aa472fb9248aa9ba829_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE