ServiceMain
helpcome
mygod
Behavioral task
behavioral1
Sample
c8af06337cfdb7b12bb57a3d1fa77af3_JaffaCakes118.dll
Resource
win7-20240704-en
Target
c8af06337cfdb7b12bb57a3d1fa77af3_JaffaCakes118
Size
180KB
MD5
c8af06337cfdb7b12bb57a3d1fa77af3
SHA1
f30c4f98ba7735cbfa6424f400d253d61f7d24ec
SHA256
244c8404196cf1e180d0ef27681b90b05c2e8cd5c1aabe2ed899f7a30a6cd0b4
SHA512
3fc1539147ebd38497da5d43cc627395d943252c8362a54b67ee1438af12a0931bc9588b6816a79c41e4089e2ffad845d00ec2c439a0b1c5f0ff35836cb6b526
SSDEEP
3072:7vHyan7C4JyQC4yDmHmClHnba2FsO9mqWTTtmPy2vlhSpDp:LHya2wyQC4c+BaMsO9bctmR
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
c8af06337cfdb7b12bb57a3d1fa77af3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
HeapFree
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
MapVirtualKeyA
MessageBoxA
DeleteDC
LookupAccountNameA
SHGetSpecialFolderPathA
SHDeleteKeyA
_strnicmp
waveOutClose
gethostname
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
ImmReleaseContext
InternetOpenA
capGetDriverDescriptionA
ICSeqCompressFrame
GetModuleFileNameExA
WTSFreeMemory
ServiceMain
helpcome
mygod
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ