DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Static task
static1
Behavioral task
behavioral1
Sample
53460387ccb367f94338438f58573998_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
53460387ccb367f94338438f58573998_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
53460387ccb367f94338438f58573998_JaffaCakes118
Size
58KB
MD5
53460387ccb367f94338438f58573998
SHA1
8da9b4ac793e063381fa0aafe867b1687f64c012
SHA256
f6d2c7b54ddfe1280391a373ee07ba8e661358d0fc7821b95515fb9c1a954504
SHA512
d06528243f69c8c32ada0eb128eb26e951988f148433d461223714cfd826941eeebf406082fb9faac553b23f1c92925ee1ae3dca3176a4fd996c56479dbae3e8
SSDEEP
1536:leqU671j+5LRt0sdTIpPbWkIQrpbMU/NB/iLhxMbFqgwhgLan:V916H0sdIpbWkLn/NK2W0an
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
53460387ccb367f94338438f58573998_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE