DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
0dbc1a6d488b041a5d1a07eb2bae9aa7_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0dbc1a6d488b041a5d1a07eb2bae9aa7_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
0dbc1a6d488b041a5d1a07eb2bae9aa7_JaffaCakes118
Size
84KB
MD5
0dbc1a6d488b041a5d1a07eb2bae9aa7
SHA1
c8e1493b1dacaf294b62e8fa609e91ea318fc9e3
SHA256
4eb815348f331af8b6d516f5a4517585d64b9c9d5620933adb7078b405a72f16
SHA512
578c3c631d0cccb0a04d1627d3a5e4328671e02e9bd5baf26ae695bb1c9cc2bab264f065f4909fc51ccbdc571e93dd95101ab49d53c3923e297bdd0016b060ec
SSDEEP
384:gCQlz42F1Y8y4aHGaktxzXiyHtOu6BFwvpVr/IG124/rW+A36XrcsE81ArySFdkv:924win4aHGJrZHtO5wHIKN/jnrDYdWZ
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0dbc1a6d488b041a5d1a07eb2bae9aa7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateMutexA
CloseHandle
WriteFile
SetFilePointer
ReadFile
CreateFileA
GetTempPathA
DeviceIoControl
lstrlenA
GetProcAddress
LoadLibraryA
GetVersionExA
HeapFree
HeapAlloc
GetProcessHeap
DisableThreadLibraryCalls
GetModuleFileNameA
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
GetLastError
CreateThread
ResumeThread
RegEnumValueA
RegOpenKeyExA
RegQueryInfoKeyA
GetAdaptersInfo
time
rand
_rotl
memcmp
??2@YAPAXI@Z
??3@YAXPAX@Z
_purecall
_mbslwr
_mbsstr
_except_handler3
strlen
sprintf
strncpy
memcpy
strcpy
strcmp
free
_initterm
malloc
_adjust_fdiv
strcat
memset
localtime
ShellExecuteA
StrCmpNIW
StrCmpIW
URLDownloadToFileA
URLDownloadToCacheFileA
InternetCrackUrlA
InternetOpenA
InternetConnectA
HttpOpenRequestA
HttpSendRequestA
HttpQueryInfoA
InternetReadFile
InternetCloseHandle
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE