CodeSeT
CodeSprite
ServiceMain
Behavioral task
behavioral1
Sample
48c7df99089edd824b427a9b1d00c017_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
48c7df99089edd824b427a9b1d00c017_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
48c7df99089edd824b427a9b1d00c017_JaffaCakes118
Size
312KB
MD5
48c7df99089edd824b427a9b1d00c017
SHA1
a5a3c03e6ca29b39f5881f824cb1978379527d68
SHA256
2e1b657ed676d209fe27cf9c03f4cb040f9d2112f7e798b9c9aea2e5b37f1c69
SHA512
aa64bb938ea9d3f7bb3e3dad14697bac7df6e559007e8925f4bb8d018e1e077d03fa9970197761b0d4725f686e10f5a863f3ccf8fdbf9aa95aa2f10194e8f43d
SSDEEP
6144:xIeRrNHAYKIdFchQ6NnMdohq9HwCVRn+Q/ymBRNHQk:xzAYKwqNNMdohq9HwHkwk
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
48c7df99089edd824b427a9b1d00c017_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
GetCurrentThreadId
GetModuleHandleA
GetProcAddress
VirtualProtect
LoadStringA
RegQueryValueExA
SysFreeString
GetDeviceCaps
InternetReadFile
WSACleanup
timeSetEvent
WSAStartup
CodeSeT
CodeSprite
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ