DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
0dd56c39d1059ff9e2d74a267e106540_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0dd56c39d1059ff9e2d74a267e106540_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0dd56c39d1059ff9e2d74a267e106540_JaffaCakes118
Size
79KB
MD5
0dd56c39d1059ff9e2d74a267e106540
SHA1
a08a21e6ddeaa661256aa5eae68ee0ca31be08a8
SHA256
dad3216dc443eaea398ccae53c8ff7bf21b28e47c87bd50e164fdc45d83f1589
SHA512
f6196592e03d79a34d796222e9df0683259b8f41695face9bddd16acfd1075c847039822b48ad70eb31b5589b6bcf555b35a46dd033656d2a181b02d5b52a2af
SSDEEP
768:lNcNlgdH+dmdgZt2TAAeoX1l38MGdyYrV5WR0zrjkHcMUSRJ0T7:lylgd04gzAhNXjHGnrV5NAHc6RK
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0dd56c39d1059ff9e2d74a267e106540_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateFileA
WriteFile
CloseHandle
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InterlockedIncrement
InterlockedDecrement
MultiByteToWideChar
FreeLibrary
IsDBCSLeadByte
lstrcpynA
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
WideCharToMultiByte
lstrlenW
GetLastError
InterlockedExchange
lstrcatA
GetLocaleInfoA
GetThreadLocale
GetVersionExA
LockResource
ReadFile
DisableThreadLibraryCalls
RtlUnwind
GetProcessHeap
HeapAlloc
HeapSize
HeapFree
DebugBreak
HeapReAlloc
lstrcmpiA
lstrcpyA
lstrlenA
GetModuleFileNameA
ExitProcess
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetACP
RegDeleteValueA
RegCreateKeyExA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteKeyA
RegCloseKey
RegSetValueExA
RegQueryValueExA
RegOpenKeyA
InitCommonControlsEx
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance
StringFromGUID2
ShellExecuteA
SHGetSpecialFolderPathA
PathFindExtensionA
StrToIntA
StrStrA
URLDownloadToFileA
wsprintfW
wsprintfA
MessageBoxA
CharNextA
InternetOpenA
InternetCloseHandle
InternetOpenUrlA
InternetReadFile
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE