Activate
DllCanUnloadNow
DllGetClassObject
HookProc
Logoff
Logon
addFunc
Behavioral task
behavioral1
Sample
047140d054758c7a92b82e2ce0b4f9cf_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
047140d054758c7a92b82e2ce0b4f9cf_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
047140d054758c7a92b82e2ce0b4f9cf_JaffaCakes118
Size
32KB
MD5
047140d054758c7a92b82e2ce0b4f9cf
SHA1
d584a829a09a9ee42ca8eaf0fea93c4efb78e373
SHA256
2a519a52015cf158600a88904fbcb6ac84c6265c77fec6a04fe7713bd8fbb978
SHA512
6a012d76e06c85695a8479a14e50825209098062e292fbbe119b7c76acda38426138f88199533b9f6214fa25f55f00f45e1378a96d28e990689a876f66a38d03
SSDEEP
768:otlcxAd8lKuvxntv9C88LQP2RzRoWYtnIckGQvhrb:Pxy8Yuv1yRz2hkPZ
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
047140d054758c7a92b82e2ce0b4f9cf_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DrawCaption
DestroyWindow
CreateMenu
CreateMDIWindowA
CreateIcon
CreateDialogIndirectParamA
CreateDesktopW
CreateDesktopA
CreateAcceleratorTableA
CopyImage
CloseWindow
CharUpperBuffA
CharUpperA
CharToOemBuffA
BeginPaint
ActivateKeyboardLayout
EnumResourceTypesA
lstrcpynA
lstrcmpiA
lstrcmpA
VirtualFree
VirtualAlloc
UnmapViewOfFile
TlsSetValue
TlsAlloc
Sleep
RtlUnwind
LeaveCriticalSection
GetVersion
GetPrivateProfileStringA
GetFileSize
GetDateFormatA
GetCommandLineA
CompareStringA
EnumResourceLanguagesW
EnumResourceNamesA
ExitProcess
FlushFileBuffers
FreeResource
Activate
DllCanUnloadNow
DllGetClassObject
HookProc
Logoff
Logon
addFunc
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ