??����?��??��yD��
?��?��
RunDllHostCallBack
��??����?1��?��Call
Behavioral task
behavioral1
Sample
fd626894a237808ce7282f3c300b54bd_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fd626894a237808ce7282f3c300b54bd_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
fd626894a237808ce7282f3c300b54bd_JaffaCakes118
Size
916KB
MD5
fd626894a237808ce7282f3c300b54bd
SHA1
5c46caf0b8cd3554d7854e43d165cab425c702bb
SHA256
b34c999f1090a2e4d97841a7b7d002c3ef43fcc272be74c80631cf0c4336df0a
SHA512
401f91ceffac095dd2ed5bb2c368f982f9f7926121dce8d00d3f56c0e3ef56efa4db0ff92c45da84a802ab75b377fa5a3236b771284786a5efa11df48c26beb5
SSDEEP
24576:7Xr/mTeC/sHyK+MaZD+UaIbey317AnxtkLabFqG:7XTmTMHnuh+UFyy3CfWaZ
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
fd626894a237808ce7282f3c300b54bd_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
waveOutWrite
WSAAsyncSelect
DeleteFileA
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
GetScrollRange
SaveDC
OpenPrinterA
RegOpenKeyExA
Shell_NotifyIconA
OleUninitialize
LoadTypeLi
ImageList_Destroy
ChooseColorA
??����?��??��yD��
?��?��
RunDllHostCallBack
��??����?1��?��Call
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ