AutoDialFunc
CmCustomDialDlg
CmCustomHangUp
CmReConnect
GetCustomProperty
InetDialHandler
RasCustomDeleteEntryNotify
RasCustomDial
RasCustomDialDlg
RasCustomEntryDlg
RasCustomHangUp
Behavioral task
behavioral1
Sample
0c485aaef00bfd858b7b2e87d13edce7_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0c485aaef00bfd858b7b2e87d13edce7_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
0c485aaef00bfd858b7b2e87d13edce7_JaffaCakes118
Size
148KB
MD5
0c485aaef00bfd858b7b2e87d13edce7
SHA1
90e5e09972e1fc161361e156d77dfbfa890ad686
SHA256
6201f81f13509a521d7f887076cee38708e681d8d28f8b1d5647e3aae705d66e
SHA512
35c23596b4b46917bad910d1b93b42f56c13a3d1ba4ed57493a5999d57c8ab1b0ceadf7c4680456d1aa63a0c35710d526e7c959507e28d1022c2cd681aac8cf0
SSDEEP
3072:Z33r6qbj/YswD4DRDjupERwDV9goHXTBft38cxDg:lb6o4DIRXuWeSoHXTBlFx
resource | yara_rule |
---|---|
sample | family_gh0strat |
Checks for missing Authenticode signature.
resource |
---|
0c485aaef00bfd858b7b2e87d13edce7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetClassNameA
GetWindow
ShowWindow
EnableWindow
GetWindowRect
GetCursorInfo
CloseWindowStation
CreateWindowExA
DestroyWindow
MessageBoxA
wsprintfA
DestroyCursor
wvsprintfA
LoadCursorA
RegisterServiceCtrlHandlerExA
RegOpenKeyExW
SysFreeString
SHDeleteKeyA
GetTempFileNameA
IsBadStringPtrW
IsBadReadPtr
ExitThread
RemoveDirectoryA
GlobalMemoryStatusEx
GetProcessTimes
GetSystemInfo
GlobalAlloc
GlobalFree
LoadLibraryA
RaiseException
DeleteFileA
IsBadWritePtr
FormatMessageA
SetUnhandledExceptionFilter
LocalReAlloc
LocalSize
lstrlenA
CloseHandle
lstrcmpiA
InitializeCriticalSection
VirtualFree
LeaveCriticalSection
VirtualAlloc
GetTickCount
GetLastError
InterlockedExchange
MultiByteToWideChar
FreeLibrary
GetProcAddress
lstrcmpA
GetPrivateProfileStringA
GetPrivateProfileSectionNamesA
GetVersionExA
GetLocalTime
GlobalUnlock
GlobalLock
GlobalSize
HeapFree
GetProcessHeap
MapViewOfFile
CreateFileMappingA
HeapAlloc
LocalFree
LocalAlloc
ExitProcess
GetSystemDirectoryA
GetCommandLineA
VirtualQuery
GetModuleHandleA
GetCurrentProcessId
GetCurrentThreadId
GetShortPathNameA
GetFileAttributesExA
SetEnvironmentVariableA
GetTempPathA
GetCurrentProcess
GetLongPathNameA
GetModuleFileNameA
recv
getsockname
shutdown
send
closesocket
select
WSACleanup
gethostname
gethostbyname
socket
connect
setsockopt
WSAIoctl
WSAStartup
GetProfilesDirectoryA
GetUserProfileDirectoryA
GetAdaptersInfo
time
srand
rand
malloc
realloc
strchr
_except_handler3
strstr
_ftol
ceil
memmove
??2@YAPAXI@Z
??3@YAXPAX@Z
__CxxFrameHandler
strncpy
wcsrchr
_beginthreadex
_onexit
__dllonexit
_adjust_fdiv
_initterm
_strupr
_wcsicmp
_memicmp
free
_stricmp
_strlwr
wcslen
wcstombs
atoi
strrchr
strncat
AutoDialFunc
CmCustomDialDlg
CmCustomHangUp
CmReConnect
GetCustomProperty
InetDialHandler
RasCustomDeleteEntryNotify
RasCustomDial
RasCustomDialDlg
RasCustomEntryDlg
RasCustomHangUp
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ