AlphaBlend
DllInitialize
GradientFill
TransparentBlt
vSetDdrawflag
Behavioral task
behavioral1
Sample
CWUB2/msimg32.dll
Resource
win7-20240708-en
Target
75f2a88420803c0ab6be8f788ad1dd6a_JaffaCakes118
Size
27KB
MD5
75f2a88420803c0ab6be8f788ad1dd6a
SHA1
83d3ca4cb37f8dd15aee628a5873982aacf5e736
SHA256
5a8762b457bf76a6294a5e3b8aaa2d3d056ca2d007d9dba61ddde5cf21876622
SHA512
8ab014270c2109839dc54a9e08de65e343c25ec30436efae3c930f1e98014ca6bc1b989a3acb7e87e10e98bf221cb45645a752226399ae9e769c78f40a6ab261
SSDEEP
384:/qZzN7cQy2TBqCztlDi0lXIKXyv9HVTNVTR9gdvsF4a/spRVJISXMLojN:/ld29n1X1XyVN0dba/2T8LojN
Detects file using ACProtect software.
resource | yara_rule |
---|---|
static1/unpack001/CWUB2/msimg32.dll | acprotect |
resource | yara_rule |
---|---|
static1/unpack001/CWUB2/msimg32.dll | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/CWUB2/msimg32.dll |
unpack002/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
AlphaBlend
DllInitialize
GradientFill
TransparentBlt
vSetDdrawflag
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ