gac
gec
i3s
ii3
irc
isp
pti
sql
st2
swt
uai
uei
yzg
z3i
Behavioral task
behavioral1
Sample
b72299ddac2274423a1ebdd75c49dd40_JaffaCakes118.dll
Resource
win7-20240708-en
Target
b72299ddac2274423a1ebdd75c49dd40_JaffaCakes118
Size
4.9MB
MD5
b72299ddac2274423a1ebdd75c49dd40
SHA1
fccb8ef56374571f1e844616a321a44e6ce71bf7
SHA256
40dfd6727e40fff0cd9a1584ba36a3470c4b5d687b182a13f33d392b605fb376
SHA512
272ff568b670a79e20bdfb50c3cd0f558fc47f5e6d7298d8de7b70a23a783b23bac22b34af3a70b851f0bf5c121ef85f3532f12bef95c0481d20f7015dfc9eda
SSDEEP
98304:8VhccUcZWDQ4FO0sjU0aiMLGa+7DvVuYyrMuKhws09pI:8Vh7r4FOQ0aRCJ77VsrMh3
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
b72299ddac2274423a1ebdd75c49dd40_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetVersionExW
LCMapStringW
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
wsprintfW
CoCreateInstance
VariantInit
VerQueryValueA
gac
gec
i3s
ii3
irc
isp
pti
sql
st2
swt
uai
uei
yzg
z3i
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ