getDC
getDC1
star
Behavioral task
behavioral1
Sample
732ecac57f404ea91001b5a2bd093630_JaffaCakes118.dll
Resource
win7-20240708-en
Target
732ecac57f404ea91001b5a2bd093630_JaffaCakes118
Size
80KB
MD5
732ecac57f404ea91001b5a2bd093630
SHA1
1254495690bbd65e22c41709e38b9cafe517bbb6
SHA256
b29db7aac79eb02fc4e9a51934b1b2992bfcd794e145cf1144f230e9811cd8b5
SHA512
bfd5fb14137766d60608472772530f34638d39c0856662cd0baa448c3ccf5de42e9b85b5fa46a884564ca04f55c867a84b7ac33b583cc54c2668f1df67165d48
SSDEEP
1536:7fNEZ5KB9w1H6/FHMap/5PyhtmBsw0gVfMVyhamY/XYop7BD/nbOjs5b:7VEZ5KXwh69/t5+cBXxEaamaXYop75nf
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
732ecac57f404ea91001b5a2bd093630_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrlenA
GetModuleHandleA
GetProcAddress
VirtualProtect
wsprintfA
getDC
getDC1
star
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ