deinit_dll
dispatcher
init_dll
Behavioral task
behavioral1
Sample
39b9dbf12e7ac4e54a84d9c72a26c8ed_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
39b9dbf12e7ac4e54a84d9c72a26c8ed_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
39b9dbf12e7ac4e54a84d9c72a26c8ed_JaffaCakes118
Size
52KB
MD5
39b9dbf12e7ac4e54a84d9c72a26c8ed
SHA1
4431ca322649368d08baea9b51324665d1eb6284
SHA256
58222ce7d0ede098ab79eb57e05ba7af7b6aecb0dbd89b044ef1cd0c8559de04
SHA512
74ede973d57a30c1c503c57a9bfee1b9a01a7a9f7f923fc8a38f7008efc7ebbb77f78b409bca7db338ce4d01cf0f1e021fc58146763f84b6e9f7b3ecc67b67fc
SSDEEP
1536:ykVxu04L7NYZif8UZTdMfyVBhoAzXPah:ykTp4L+ZifnldMKbho+fah
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
39b9dbf12e7ac4e54a84d9c72a26c8ed_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VirtualAlloc
GetModuleHandleA
GetProcAddress
VirtualProtect
MessageBoxA
deinit_dll
dispatcher
init_dll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ