?T����?����?00
RunDllHostCallBack
��??��1???
Behavioral task
behavioral1
Sample
ef930178c653bb360d356efc9cfeb117_JaffaCakes118.dll
Resource
win7-20240704-en
Target
ef930178c653bb360d356efc9cfeb117_JaffaCakes118
Size
976KB
MD5
ef930178c653bb360d356efc9cfeb117
SHA1
d7fe5edc54cd032be3c821d585cd85148a93a3e1
SHA256
d9d516a0f7657d970c8ad74f1d4c379a0fb0c995c4de43351138bc1e3edd5c6d
SHA512
20b63ea01ea0dff249e50513654fcb90bed79ed79190899e5924057317807dea6c408fd21c7b95486fb8a1702098408ca92e93c53e00780d36768904a19b1621
SSDEEP
12288:4L6jFLRF2yvVF8UMuydtJdI+hS+St0bZ9x23xrWmglsLdV14/10UTlZ0uQMLu5y/:G6jFLRIJu+Lg1QMrDP142ORpUf9ed
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
ef930178c653bb360d356efc9cfeb117_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
midiStreamOut
WSACleanup
GlobalAlloc
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
SetClipboardData
CombineRgn
DocumentPropertiesA
RegQueryValueExA
ShellExecuteA
OleUninitialize
UnRegisterTypeLi
ord17
GetFileTitleA
?T����?����?00
RunDllHostCallBack
��??��1???
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ