PlayMusic
PlayPath
Behavioral task
behavioral1
Sample
75730174b35f9eec93e3ec37e7cd5fd2_JaffaCakes118.dll
Resource
win7-20240704-en
Target
75730174b35f9eec93e3ec37e7cd5fd2_JaffaCakes118
Size
352KB
MD5
75730174b35f9eec93e3ec37e7cd5fd2
SHA1
5deda3ee7299c7d068cc556ead4dd9c846df3e3c
SHA256
ca0a751cb302b9660b2b0b51e0682494da6756e7b802e3f6680bcd8613200cf2
SHA512
f0e5e6c2f4caafd4814914fe2477210431dd0f63db1c79efe4a93dbc8de6c7ec76bc475c70e2d434b1c199d1b5ce2d9a8c9bd002ac192e89a7d223e3ef0f8ab7
SSDEEP
6144:l29L+5sOomMV3rDdUtCFrg4lRKJ/05fQ6M3MDkxog1Kt/FGQww:l29LWom8rDNaQKJ85vyGGFw
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
75730174b35f9eec93e3ec37e7cd5fd2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
VirtualQuery
GetModuleHandleA
LoadLibraryA
VirtualAlloc
GetModuleFileNameA
ExitProcess
GetSystemMetrics
MessageBoxA
RegQueryValueExA
SysFreeString
mciSendStringA
PlayMusic
PlayPath
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ