UPSCancelWait
UPSGetState
UPSInit
UPSStop
UPSTurnOff
Behavioral task
behavioral1
Sample
0930d36962f9ede6694ea63846a8ecd1_JaffaCakes118.dll
Resource
win7-20240611-en
Target
0930d36962f9ede6694ea63846a8ecd1_JaffaCakes118
Size
152KB
MD5
0930d36962f9ede6694ea63846a8ecd1
SHA1
2f89af0b92e22b14121983a862c5ddc62e09b841
SHA256
4d82f948806f5183d04616a33a105c97aeff38c437aedcd27ce264640a97fc3f
SHA512
dca3ffa0de22348796e2c9c67d656b9c4eed55ad81822794dd6636db94af5156df854da87cb40a296b129efbf0c9b3ae12e8c548174350265e8a7bfb07d1c23d
SSDEEP
3072:vVJLb97zUb4AL32uEe0RJJmTBftAZAou4RELW:vVJt7O321JJmTBlAZAb4
resource | yara_rule |
---|---|
sample | family_gh0strat |
Checks for missing Authenticode signature.
resource |
---|
0930d36962f9ede6694ea63846a8ecd1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadCursorA
DestroyCursor
GetCursorInfo
CreateWindowExA
wsprintfA
CloseWindowStation
GetClassNameA
GetWindow
ShowWindow
EnableWindow
wvsprintfA
DestroyWindow
MessageBoxA
SysFreeString
CreateFileMappingA
RaiseException
IsBadWritePtr
FormatMessageA
SetUnhandledExceptionFilter
GetLongPathNameA
GetTempPathA
SetEnvironmentVariableA
GetFileAttributesExA
VirtualAlloc
LoadLibraryA
MapViewOfFile
GetLocalTime
GetExitCodeProcess
ExitProcess
VirtualQuery
LocalFree
LocalSize
LocalAlloc
lstrlenA
Sleep
CloseHandle
LocalReAlloc
GetLastError
GetCurrentProcess
ExpandEnvironmentStringsA
lstrcpyA
lstrcatA
MultiByteToWideChar
FreeLibrary
GetProcAddress
WideCharToMultiByte
lstrcmpA
GetPrivateProfileStringA
GetPrivateProfileSectionNamesA
GetVersionExA
lstrcmpiA
GetModuleHandleA
GetCurrentThreadId
GetTempFileNameA
InterlockedExchange
GetSystemDirectoryA
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalSize
InitializeCriticalSection
GetTickCount
LeaveCriticalSection
HeapFree
HeapAlloc
GetProcessHeap
GetSystemInfo
GetProcessTimes
GlobalMemoryStatusEx
GetCurrentProcessId
VirtualFree
DeleteFileA
RemoveDirectoryA
ExitThread
GetShortPathNameA
GetModuleFileNameA
IsBadReadPtr
IsBadStringPtrW
StrStrIA
GetAdaptersInfo
GetUserProfileDirectoryA
GetProfilesDirectoryA
setsockopt
WSAIoctl
recv
select
send
gethostname
connect
gethostbyname
socket
closesocket
WSACleanup
WSAStartup
getsockname
shutdown
_wcsicmp
strncpy
strncat
wcsrchr
strchr
??2@YAPAXI@Z
strrchr
strstr
_except_handler3
malloc
free
??3@YAXPAX@Z
__CxxFrameHandler
_ftol
atoi
rand
srand
strtol
_onexit
__dllonexit
??1type_info@@UAE@XZ
_adjust_fdiv
_initterm
_stricmp
_strlwr
_CxxThrowException
_memicmp
_strupr
ceil
memmove
realloc
wcslen
_beginthreadex
wcstombs
UPSCancelWait
UPSGetState
UPSInit
UPSStop
UPSTurnOff
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ