GetMsg
InjectDll
UnmapDll
Static task
static1
Behavioral task
behavioral1
Sample
Giang Hồ TL.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Giang Hồ TL.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Hook.dll
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
Hook.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
JX2Update.exe
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
JX2Update.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
License.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
License.dll
Resource
win10v2004-20240802-en
Target
eeced579269741bf656b17e9461a5f5f_JaffaCakes118
Size
844KB
MD5
eeced579269741bf656b17e9461a5f5f
SHA1
2f510d654419247901d49ed9a6e40cd0c720bc4a
SHA256
9a7836bc5e4df087c4aca721ab5b80d23e4ba7aa1c25a9059abf99a990e80c50
SHA512
d4ceaf5b8c0ba2367b17ee7c44e27cddc7041f305611d7aa3250f0d8601ef43627091db080f3060b299855f95a3c3c8f05b2cae83938e2d3473b1068ec305001
SSDEEP
24576:9Rloe0FwRcvTN91w71k4wHZTvwT/H98aFmx8R:9TmFiM91w7pw5TvwT/f0x8R
Checks for missing Authenticode signature.
resource |
---|
unpack001/Giang Hồ TL.exe |
unpack001/Hook.dll |
unpack001/JX2Update.exe |
unpack001/License.vie |
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
GetMsg
InjectDll
UnmapDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CheckLicense
CheckUpdate
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE