ComInit1
ComInit2
ComInit3
ComInit4
ComInit5
ComInit6
ComInit7
Behavioral task
behavioral1
Sample
059cd8d6b02584237986df1b22d8286f_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
059cd8d6b02584237986df1b22d8286f_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
059cd8d6b02584237986df1b22d8286f_JaffaCakes118
Size
793KB
MD5
059cd8d6b02584237986df1b22d8286f
SHA1
2906829a50df4b3e8a5919670eb7eb49884e06f6
SHA256
9440e0666bf6a532253fcbf3979ad27893555c075d435c4f5a8cd0ae1225bd4d
SHA512
b477100ddb50c9c0c0820adf9347d9de0f8a1962a1e2474e9d277104925e6ba89a4180b975948f49d280da3fa56a31587c59cd9b1e1b1e033053292635edcd6e
SSDEEP
12288:46ixGNuzcpwEDzuHIVf9qMdrbm68a7smw1RgY9b+pvXteaZ86K06Za1F:46ixvMDyyMMdrbN7smw1Rv9bcU6J603
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
059cd8d6b02584237986df1b22d8286f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
send
GetACP
GetModuleHandleA
LoadLibraryA
VirtualAlloc
VirtualFree
GetModuleFileNameA
ExitProcess
GetClassNameA
ComInit1
ComInit2
ComInit3
ComInit4
ComInit5
ComInit6
ComInit7
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ