??����?��??��yD��
??����D��??��yD��
?a?��
?��?��
RunDllHostCallBack
Behavioral task
behavioral1
Sample
fbaae923129d4ed4b63912f146aead6a_JaffaCakes118.dll
Resource
win7-20240708-en
Target
fbaae923129d4ed4b63912f146aead6a_JaffaCakes118
Size
884KB
MD5
fbaae923129d4ed4b63912f146aead6a
SHA1
09c08cfc0aceb4b5fa02c5fd039e1d0f94227495
SHA256
8c4da22ed90e8a320204b12c3640aa5c875fa3418a114bfd265fff4e533ec7b1
SHA512
12dba5c26a705b339f13c5284bc046603238af1eadbd5a683ffb8bbdac57d19bd1e076356156e72680fc6ae35e8c4a81a8366c513f4dec78344240997c6c0272
SSDEEP
24576:hm4oy5IllOCC9YkHtjlC94gMSo72KYszYsYE4hEm2LF/L7k:hm4oeqlOKrGgNK98EmAPk
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
fbaae923129d4ed4b63912f146aead6a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SetEnvironmentVariableA
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
GetSysColor
FillRgn
midiOutReset
ClosePrinter
RegSetValueExA
ShellExecuteA
CLSIDFromString
SysAllocStringLen
ord17
ord8
recvfrom
GetFileTitleA
??����?��??��yD��
??����D��??��yD��
?a?��
?��?��
RunDllHostCallBack
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ