ServiceMain
ServiceMainManual
Behavioral task
behavioral1
Sample
07887b37589d68747f6ea1b826ce30b0_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
07887b37589d68747f6ea1b826ce30b0_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
07887b37589d68747f6ea1b826ce30b0_JaffaCakes118
Size
151KB
MD5
07887b37589d68747f6ea1b826ce30b0
SHA1
d944852402c664b95e9ff741172e4e00b990bbba
SHA256
d52da00c948a9cb19af1b16d0e278fbf51cac2697a4d06ceea77baf3905375a3
SHA512
a0b65c4682b385f58b3115fe96416b1ac4d03f7633416971455e32e57391e9ee8bbff57d384a90bdff8d5650ed57b5086a5564577621c18f42f0b487f05343e1
SSDEEP
3072:+8wJYljjqmCfmXHocFitg+y6XKTA2uN3jfKhuiWPmzVQtm+FDnkicIHJI:+V6XHVitg+yqR2A3jfCWP2QMkDnL
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
07887b37589d68747f6ea1b826ce30b0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
VirtualFree
VirtualAlloc
ExitProcess
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
FreeLibrary
LoadLibraryA
wsprintfA
MessageBoxA
ServiceMain
ServiceMainManual
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ