Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
7a36f49ac93109aa86e0e2deae16d03b_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
7a36f49ac93109aa86e0e2deae16d03b_JaffaCakes118.exe
Resource
win10v2004-20240426-en
Target
7a36f49ac93109aa86e0e2deae16d03b_JaffaCakes118
Size
1.8MB
MD5
7a36f49ac93109aa86e0e2deae16d03b
SHA1
ab2847d9f58f6d3503e19eb62d903961f56e9b63
SHA256
f25b68f2f0c6c1b924b2e32a79b1fbd302e10d30905a97ca18c4148c3a122ff3
SHA512
9f904dd9b12403085e03389cb2999264eb1453a2be5ebba6723ae29932f1f1ff59e9abbef1dcfccbca3e51ff2be46a0556255aef4d3bcbfb757f8c65900a222a
SSDEEP
49152:OpsycQjpDy0s9VByoKUxToUZO1e1JndW4:OpPcMg0poKe1Z2Sdj
resource | yara_rule |
---|---|
sample | vmprotect |
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetVersionExW
GetPrivateProfileStringW
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
SetWindowPos
DPtoLP
CommandLineToArgvW
OleLockRunning
GradientFill
PathFileExistsW
GetAdaptersInfo
GdipLoadImageFromFile
ImmGetContext
CryptGetHashParam
CreateErrorInfo
WSAStartup
ord211
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ