HaHaInstall
HaHaUninstall
Install
ServiceMain
Behavioral task
behavioral1
Sample
44f16547612152950ac7e11891682049_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
44f16547612152950ac7e11891682049_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
44f16547612152950ac7e11891682049_JaffaCakes118
Size
72KB
MD5
44f16547612152950ac7e11891682049
SHA1
0fb88ef3cc390ea7bf157c40fb2d1e92c7230fea
SHA256
ce46aaca09557c901e8087aac8f049373f4113562dd9ff04d85a2ac165ec7912
SHA512
4a54551802f8f09465b31566558bc12a3b0569da4f379c859ab1df3f420c1982df2f0a42616a0c110d4cef7ea73c6ef148678ff01002797959ac458da6a49045
SSDEEP
1536:BOJ4DqTD3n8tnpBSFBiiEMGDdi0v+++++++++++d/++++3++k++++++++7NHUPQD:o/7VsiEMGDdi0LNHUPQ6AQmb3
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
44f16547612152950ac7e11891682049_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
HaHaInstall
HaHaUninstall
Install
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ