ComInit1
ComInit2
ComInit3
ComInit4
ComInit5
ComInit6
ComInit7
Behavioral task
behavioral1
Sample
04c0c2cd15f3aae37bb03a1266023b0b_JaffaCakes118.dll
Resource
win7-20240708-en
Target
04c0c2cd15f3aae37bb03a1266023b0b_JaffaCakes118
Size
980KB
MD5
04c0c2cd15f3aae37bb03a1266023b0b
SHA1
421a2b4e5b883ab8e9af22b789d296186f2ccf6c
SHA256
adc32bb5885bfcbd6e1f8e4414224dcf16369f9869b457a4cd24b569e673236c
SHA512
bc8cdebd40250d1fa94ce4644c9c1d817ad6b21931001054b45b2b7581ef290771a0965e4c53c914fdeb673f435569a07ddd26c458d29c7bc7e3de5ae1db702c
SSDEEP
12288:j5jnj8tw9dp69XmToEFwmKLPMd8TvuaeitK6B4HAJeUpt:j5jj8tw4ZpEFPsUEv+gJ7
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
04c0c2cd15f3aae37bb03a1266023b0b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
socket
TerminateProcess
GetModuleHandleA
LoadLibraryA
VirtualAlloc
VirtualFree
GetModuleFileNameA
ExitProcess
wsprintfW
ComInit1
ComInit2
ComInit3
ComInit4
ComInit5
ComInit6
ComInit7
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ