GetlinehA
HEARTBEATTIMEOUT_ERROhW
LoadBitmaphA
MAXIMUM_ALLOWEhA
MessageBeephA
MessageBoxhW
NewMainFun
SetProcessWindowStationhW
Behavioral task
behavioral1
Sample
dcc5efbc4c47833077a80df863596af9_JaffaCakes118.dll
Resource
win7-20240903-en
Target
dcc5efbc4c47833077a80df863596af9_JaffaCakes118
Size
169KB
MD5
dcc5efbc4c47833077a80df863596af9
SHA1
de3e6dbd428c10509ccd88f853c9c57e0073d48d
SHA256
29a31694f670f7a953478fffbfce7eb274608f080275e5b8e6cee7860398614e
SHA512
6e80e14a9cfb1b8ab3d0adaba131f1cecad2f98e0e10d6d894ad4113b68fcf638434bfd5d6a387fe89f4771ce2c75521d57a3463d43dc2fb28024ea624764bcb
SSDEEP
3072:trweJDFJsKulxR8nC/SNJOQvPFw/t4gXO3J4tAwWeIb6jRwpkk7Lr/4Jtey:KeJDFJ07gKYNwFTeuez7biwik7Lz4v
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
dcc5efbc4c47833077a80df863596af9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetTickCount
GetModuleHandleA
GetProcAddress
VirtualProtect
SetCapture
CreateCompatibleBitmap
CloseEventLog
SHGetFileInfoA
_strnicmp
waveInReset
WSAStartup
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
ImmReleaseContext
InternetOpenA
capCreateCaptureWindowA
ICSeqCompressFrame
GetModuleFileNameExA
WTSFreeMemory
GetlinehA
HEARTBEATTIMEOUT_ERROhW
LoadBitmaphA
MAXIMUM_ALLOWEhA
MessageBeephA
MessageBoxhW
NewMainFun
SetProcessWindowStationhW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ