_�����ӳ���
huibiandu
jjjjjjjjjjjjoiuuuuuuuuuiuouououogsdrewrwetwetwetwetwetwtwertrllllllllll
Behavioral task
behavioral1
Sample
be5a6da9d3825f744592b7765d72cdd3_JaffaCakes118.dll
Resource
win7-20240729-en
Target
be5a6da9d3825f744592b7765d72cdd3_JaffaCakes118
Size
800KB
MD5
be5a6da9d3825f744592b7765d72cdd3
SHA1
01ab7b7daec63c468f31d814b1d82d323c437ca2
SHA256
2ffeb87c24df22ddf4c847a55e11b0aa6229f456146fd240a4e51e3acb29f3bf
SHA512
e234a3df29a4c32d8e4d1c38f955107510dc0895b5d7eb8408462fc24d94250b1bc8d38af01b41888723423fbe46d8a202fd5f38331730d58f12f6a7139fb519
SSDEEP
24576:hRj18H/ItTzMxbmZgtNtf7BsOfeX4ptbFw:DefItTsztHfXfSYtJw
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
be5a6da9d3825f744592b7765d72cdd3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
midiStreamOut
WSAAsyncSelect
WideCharToMultiByte
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
GetSubMenu
MessageBoxA
SetMapMode
OpenPrinterA
RegQueryValueExA
DragAcceptFiles
OleInitialize
LoadTypeLi
ImageList_Add
GetSaveFileNameA
_�����ӳ���
huibiandu
jjjjjjjjjjjjoiuuuuuuuuuiuouououogsdrewrwetwetwetwetwetwtwertrllllllllll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ