FGHFGH
FGJGFH
HFGHG
SDHHFD
Behavioral task
behavioral1
Sample
70c3c25325f7838ccfbd69e46324ae76_JaffaCakes118.dll
Resource
win7-20240704-en
Target
70c3c25325f7838ccfbd69e46324ae76_JaffaCakes118
Size
516KB
MD5
70c3c25325f7838ccfbd69e46324ae76
SHA1
3f1b434dbb5b4cc74fa997bcb4faf15257cde38a
SHA256
0841eebd7cb1a4d55b111db842dbbf35e030912bd0faabb408283a5350cf0521
SHA512
ec06013feb6bc7580319019d3666530763565749a274ed8407209cb928832e5ff7b2b8ea996d223469e8f2ed2907e88cd444bdd2f724dc4e90e5214bb97c2922
SSDEEP
6144:C82G3bth6PFd4e2BthkqfX+ImNVYcW0bMItcMfOVZLgNMzNPlVnUWl+wh6FyAS+U:193K7BETkW0b4MWuNM5fhldGq+PvE
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
70c3c25325f7838ccfbd69e46324ae76_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
midiStreamRestart
WSAAsyncSelect
GetTimeZoneInformation
GetModuleHandleA
GetProcAddress
VirtualProtect
GetSubMenu
OffsetViewportOrgEx
OpenPrinterA
RegOpenKeyExA
ShellExecuteA
OleInitialize
LoadTypeLi
ord17
GetSaveFileNameA
FGHFGH
FGJGFH
HFGHG
SDHHFD
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ