�����ϵİ�˹���ϵİ��˴�
�ļ��Ȱ��ϵİ�ʱ����
�ӳ���1
Behavioral task
behavioral1
Sample
5c92fc3ef3f94733cd46fb4f4b276101_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5c92fc3ef3f94733cd46fb4f4b276101_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5c92fc3ef3f94733cd46fb4f4b276101_JaffaCakes118
Size
332KB
MD5
5c92fc3ef3f94733cd46fb4f4b276101
SHA1
2b86de0666d74927e52ed1dd1bee88b18634ec85
SHA256
0e2c775da68aeb45ebaf9488635120cce575c82bc5426b1f65c51d9ee52a9e12
SHA512
828d3ca3059844c5c7b472b7c7936edf2306aed075cb86fcc076b7e922688c31513b7d3f2dc026cdb86ec23ec346f8fc1a199a6b4cbaf5ad7b4d5a25fb2d2763
SSDEEP
6144:Yub9WadpCLDTX/4/3uX0mdlXCibdmQt2dxkFYV:YykadyD74/3OFXCint2QO
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
5c92fc3ef3f94733cd46fb4f4b276101_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
OpenMutexA
LoadLibraryA
CreateFileMappingA
MapViewOfFile
GetCurrentProcess
GetModuleHandleA
GetProcAddress
GetCurrentThread
Beep
VirtualQueryEx
VirtualProtect
LocalSize
RtlMoveMemory
IsBadWritePtr
RtlZeroMemory
lstrcpyn
IsBadReadPtr
OpenFileMappingA
UnmapViewOfFile
CloseHandle
GetProcessHeap
ExitProcess
HeapAlloc
HeapReAlloc
HeapFree
GetModuleFileNameA
DeleteFileA
MoveFileA
WriteFile
CreateFileA
GetTickCount
LCMapStringA
FlushFileBuffers
GetCommandLineA
GetVersion
TerminateProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
RaiseException
GetCPInfo
GetACP
GetOEMCP
InterlockedDecrement
InterlockedIncrement
SetFilePointer
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
MessageBeep
wsprintfA
MessageBoxA
PostMessageA
GetForegroundWindow
CallWindowProcA
GetAsyncKeyState
timeSetEvent
�����ϵİ�˹���ϵİ��˴�
�ļ��Ȱ��ϵİ�ʱ����
�ӳ���1
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ