AutoDel
Port
dllName
szIP
vPasswd
Behavioral task
behavioral1
Sample
84016a61f433326e54be78b190dd3ab5_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
84016a61f433326e54be78b190dd3ab5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
84016a61f433326e54be78b190dd3ab5_JaffaCakes118
Size
324KB
MD5
84016a61f433326e54be78b190dd3ab5
SHA1
b50c451dc733ee86b65e30aac4dc23f842fff4a4
SHA256
30d9c4294cce4f8335879479b3724d2586672f7fb23ed644f2b29af315205a02
SHA512
a43be446094e144c1e6dd024f7f37f57f2f7b17bf02367d1d25622e09f44c5c68b2b952a16242cc7bd92fa20ee7fc42050640cd2efe44d0fee5619e761387952
SSDEEP
6144:U7NHTzrvLSUUotwGDvo4TXLzbk/THulxEImXW8xwIakUMYfA:UFTvOUvqGTo4zwjuGXHZUZfA
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
84016a61f433326e54be78b190dd3ab5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CloseHandle
GetModuleHandleA
GetProcAddress
VirtualProtect
SHChangeNotify
PathStripPathA
_controlfp
MessageBoxA
AutoDel
Port
dllName
szIP
vPasswd
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ