DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
f751d68ec2866ea94b8541f7c88c4e94_JaffaCakes118.dll
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
f751d68ec2866ea94b8541f7c88c4e94_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f751d68ec2866ea94b8541f7c88c4e94_JaffaCakes118
Size
71KB
MD5
f751d68ec2866ea94b8541f7c88c4e94
SHA1
794c6b4f46c87a55986d8e915ea36b3070b8a3c3
SHA256
86f1b31cc4849dbca632db8572a79cd87d24a36ad8d1e7a1ba66bd85c5575db3
SHA512
e7c4168e186d4439e08b5b0215a53da4938fb95853713c8b3b618ed80dfc86ac636032a4b04822d6f98e944a9df7bb41b3037745e7aa1d97d0bb44c3d021a620
SSDEEP
768:8KxthIThnwvtevBOZK1C38UfRTuRviLoAVAZMuKMgMslL2JP/7O6A5nJ8wRK:viThnwvwMhRTuliLRV8MuZq2p/C6SRK
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f751d68ec2866ea94b8541f7c88c4e94_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
Sleep
FreeLibrary
HeapAlloc
HeapFree
GetVersionExA
GetProcessHeap
DeleteCriticalSection
InitializeCriticalSection
DisableThreadLibraryCalls
GetCurrentProcessId
CreateThread
TerminateThread
GetCurrentThread
GetCurrentProcess
SetLastError
OpenProcess
VirtualAllocEx
WriteProcessMemory
VirtualFreeEx
GetProcAddress
LoadLibraryA
CreateRemoteThread
GetExitCodeThread
DeleteFileA
GetLastError
SetEnvironmentVariableA
CompareStringW
CompareStringA
FlushFileBuffers
LCMapStringW
LCMapStringA
RtlUnwind
GetOEMCP
GetACP
GetCPInfo
HeapReAlloc
VirtualAlloc
ReadFile
SetEndOfFile
GetWindowsDirectoryA
CopyFileA
GetShortPathNameA
WaitForSingleObject
GetExitCodeProcess
CloseHandle
FindFirstFileA
FindClose
WriteFile
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetCommandLineA
GetVersion
SetStdHandle
GetFileType
SetHandleCount
GetStdHandle
GetStartupInfoA
SetFilePointer
CreateFileA
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
ExitProcess
TerminateProcess
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
RegSetValueExA
RegQueryValueExA
RegOpenKeyA
StartServiceA
QueryServiceConfigA
CreateServiceA
OpenServiceA
RegDeleteValueA
RegCreateKeyExA
DeleteService
CloseServiceHandle
OpenThreadToken
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
OpenSCManagerA
RegCloseKey
CoCreateInstance
ShellExecuteExA
SHGetSpecialFolderPathA
URLDownloadToCacheFileA
URLDownloadToFileA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE