ServiceMain
ServiceMainManual
Behavioral task
behavioral1
Sample
f02563a1ad488a3e2ed740d1406f5e19_JaffaCakes118.dll
Resource
win7-20240903-en
Target
f02563a1ad488a3e2ed740d1406f5e19_JaffaCakes118
Size
331KB
MD5
f02563a1ad488a3e2ed740d1406f5e19
SHA1
c192c849da7b2a45598c9fc68c5ce82aa9bbb2db
SHA256
c743f558a0ed6773926dd526537207691b33d14882705cac2aa9b61ad22b632a
SHA512
05edfb2f30a3c590be0d120ecf4509feb75c2198d4622ddbb517454586639e4dc6235504246e65eb9f6acf8725ae5f31104f502a40f51dd241ce8024f02a2df2
SSDEEP
3072:ApZg5bgZDNUQI2aMvCMjau9ypOg98KbvEKh1DvW/SpHDfsIHJI:CMgFNUQIm6MWu9ypN1vh1bbpHD
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
f02563a1ad488a3e2ed740d1406f5e19_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
VirtualFree
VirtualAlloc
ExitProcess
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
FreeLibrary
LoadLibraryA
wsprintfA
MessageBoxA
ServiceMain
ServiceMainManual
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ