D��?����?
_����?��1_?��?����??t
_����?��2_?��?����??t
run
Behavioral task
behavioral1
Sample
2d4f5bdf31aab9b05633675fe8fbad86_JaffaCakes118.dll
Resource
win7-20240903-en
Target
2d4f5bdf31aab9b05633675fe8fbad86_JaffaCakes118
Size
995KB
MD5
2d4f5bdf31aab9b05633675fe8fbad86
SHA1
3efdb7c34d3d732ec432144880f316fe2595e0a8
SHA256
7a26279ddd0f928c01bfc19ebfd32356b7c91b1b75e6769a1edd6edb1b249653
SHA512
d22d14e3ac395547ce94275b6e5a26e41d2b82794704763ef0f5f9a5d62c3beffb1dc1c925a62605440f1d3941c543a961d528ce21df85f99f36f2326315d05e
SSDEEP
12288:flN2/b42jZIPqKf4Bh0zwEc+gZlkRoSFbMp13wx/2EWzq6M2YtUdwP3C3pFmj:fL2ljZI/faui+IlkRBKpwx/2EkRACmj
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
2d4f5bdf31aab9b05633675fe8fbad86_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
TlsFree
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
UnregisterClassA
StretchBlt
waveOutOpen
OpenPrinterA
RegCloseKey
Shell_NotifyIconA
OleInitialize
UnRegisterTypeLi
ord17
recv
GetOpenFileNameA
D��?����?
_����?��1_?��?����??t
_����?��2_?��?����??t
run
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ