TMethodImplementationIntercept
__GetExceptDLLinfo
___CPPdebugHook
dbkFCallWrapperAddr
Behavioral task
behavioral1
Sample
a89c5c7cf1a5fa04e573d1d0ca7cf9cf_JaffaCakes118.exe
Resource
win7-20240729-en
Target
a89c5c7cf1a5fa04e573d1d0ca7cf9cf_JaffaCakes118
Size
7.9MB
MD5
a89c5c7cf1a5fa04e573d1d0ca7cf9cf
SHA1
f12a44c04595b567a260fc9afb5c649fe2453aad
SHA256
dd3513693cd458f4674e3ca374e8b13f3b92fc7e5de0b70da7dd991f36bc27df
SHA512
edd2eb517ab983ccfa02f5548c29b195559d67e9f9cf0598090742396a5592ffa7aad7e5bc9c99e02a2d7a433f51256e806dcebcf6c0c9636a0aa1da1ffe14ed
SSDEEP
196608:3K07DVV9Ptqb6/JpwCeydVv2lUI5sh+3d/nUoW4:3KUDVVVtf/bbDzv2X5nN/UoW4
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
a89c5c7cf1a5fa04e573d1d0ca7cf9cf_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
WinVerifyTrust
AdjustTokenPrivileges
GetVersion
GetVersionExA
GetVersionExW
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
NetApiBufferFree
RpcStringFreeW
GetFileVersionInfoSizeW
ClosePrinter
FlatSB_GetScrollInfo
ChooseColorW
AbortDoc
TransparentBlt
ShellExecuteExW
SHGetFolderPathA
ActivateKeyboardLayout
GetUserObjectInformationW
GetProcessWindowStation
GetUserObjectInformationW
CoCreateInstance
GetErrorInfo
PathFileExistsA
GetAdaptersInfo
WinHttpAddRequestHeaders
WTSEnumerateProcessesW
WTSSendMessageW
NtOpenFile
URLDownloadToFileW
TMethodImplementationIntercept
__GetExceptDLLinfo
___CPPdebugHook
dbkFCallWrapperAddr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ