ECCGenerateKeys
WLGenLicenseDynSmartKey
WLGenLicenseDynSmartKeyW
Behavioral task
behavioral1
Sample
417d888272d2b4545f9914359a2427c7_JaffaCakes118.dll
Resource
win7-20240903-en
Target
417d888272d2b4545f9914359a2427c7_JaffaCakes118
Size
220KB
MD5
417d888272d2b4545f9914359a2427c7
SHA1
926fd808cda06bd9203d7fa5a0ec407790d45d61
SHA256
66b014fb1055d74dea53033f0d8a5a253b95262a1b39c56ef7f7dcf2df9e5fd4
SHA512
2b4c1484bc55d963a7315976862adc5299b176621019990c5b644005533315e605206958d9ee0759848081319e5dfc1b292e0c693433270d95adc4cdb0adfe0b
SSDEEP
6144:kpMXogngYG7EED8gJJgS7FKLsHNrjYLSILQ8lubj/g34A2:oMlUQCGkALs9eETzgIB
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
417d888272d2b4545f9914359a2427c7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ExitProcess
LoadLibraryA
VirtualProtect
GetModuleFileNameA
wsprintfA
MessageBoxA
CryptGenRandom
ECCGenerateKeys
WLGenLicenseDynSmartKey
WLGenLicenseDynSmartKeyW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ