getDC
getDC1
star
Behavioral task
behavioral1
Sample
74fb7f7b27e9fddfedae9a0eb0642aec_JaffaCakes118.dll
Resource
win7-20240708-en
Target
74fb7f7b27e9fddfedae9a0eb0642aec_JaffaCakes118
Size
80KB
MD5
74fb7f7b27e9fddfedae9a0eb0642aec
SHA1
614fbf04b2b32bba16ecd69e65d0108510d13153
SHA256
416890c9117eb0d16793e005372cf3d1bc6ec6806cf6c56d03aa28ca112de8f0
SHA512
159ff9f545e73fc03fdb862cffbbf799c0ede6a97dbb0e91972aff975d7092bcaf469937f415b7590e1f2ed0e82a3d0c906bb1fb18628fcff9386457d33525a1
SSDEEP
1536:7fNEZ5KB9w1H6/FHMap/5PyhtmBsw0gVfMVyhamY/XYop7BD/i0J66:7VEZ5KXwh69/t5+cBXxEaamaXYop75bP
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
74fb7f7b27e9fddfedae9a0eb0642aec_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrlenA
GetModuleHandleA
GetProcAddress
VirtualProtect
wsprintfA
getDC
getDC1
star
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ