AlphaBlend
DllInitialize
GradientFill
TransparentBlt
vSetDdrawflag
Behavioral task
behavioral1
Sample
msimg32/msimg32.dll
Resource
win7-20240705-en
Target
712e151d851450b6fe3e60b4aa3e0673_JaffaCakes118
Size
11KB
MD5
712e151d851450b6fe3e60b4aa3e0673
SHA1
97734b615146bc889b804aeb51b897bd435a7ce3
SHA256
2cb6fc8437f853283ef374b75849b9ee9a859737902df386417a0cc9ba0b521e
SHA512
38125cb6eab107db5f5e589d1015e41ff381ea15aad1e836afb6fe91daf993d0332f1fbe568e641de88b344cbc10a87a0593d6e59e6591515f60af89072d9fc6
SSDEEP
192:vHqvu7qdw4MU1PcOWT1OW/tJGgz6MZ2ZTrfPlmg45bbZymqKy9pnDzNr3PXBXQna:/q35MwczVP4VggSbbZymgtHNTPxBZGHk
Detects file using ACProtect software.
resource | yara_rule |
---|---|
static1/unpack001/msimg32/msimg32.dll | acprotect |
resource | yara_rule |
---|---|
static1/unpack001/msimg32/msimg32.dll | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/msimg32/msimg32.dll |
unpack002/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
AlphaBlend
DllInitialize
GradientFill
TransparentBlt
vSetDdrawflag
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ