AlphaBlend
DllInitialize
GradientFill
TransparentBlt
vSetDdrawflag
Behavioral task
behavioral1
Sample
msimg32.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
msimg32.dll
Resource
win10v2004-20240709-en
Target
35e78bbfdb0badd9d97ff029b59e884a_JaffaCakes118
Size
27KB
MD5
35e78bbfdb0badd9d97ff029b59e884a
SHA1
117f83f456eb1d90a6f20540683756296fde4e9f
SHA256
c69691ab61f1f7608041546254126d5adf2600c7c70370f40bc0d9cd272027e8
SHA512
64d7da6a3b2985f65501f6b8ce247bea754f05d182ee6b609ad77578ffc2cd6a307f8b2861e69338615e6f548e96aff1e8b33d5f0d0d213c9fee6c8e4cac06f3
SSDEEP
768:SMxyapIbxi3PC0iYHe6l/jBB2n6reqoIjHUzM:XNCsNNlLBB6CoIDqM
Detects file using ACProtect software.
resource | yara_rule |
---|---|
static1/unpack001/msimg32.dll | acprotect |
resource | yara_rule |
---|---|
static1/unpack001/msimg32.dll | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/msimg32.dll |
unpack002/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
AlphaBlend
DllInitialize
GradientFill
TransparentBlt
vSetDdrawflag
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ