AddEmailToAutoComplete
AutoDiscoverAndOpenEmail
DllCanUnloadNow
DllGetClassObject
DllInstall
Behavioral task
behavioral1
Sample
1c5074a72fc892deb085810ba993f4df_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
1c5074a72fc892deb085810ba993f4df_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
1c5074a72fc892deb085810ba993f4df_JaffaCakes118
Size
136KB
MD5
1c5074a72fc892deb085810ba993f4df
SHA1
3bc7ba0fe5d571bb669811d0dba4390d490099a3
SHA256
785fb6342310a4575319536df617bb6f3c2a1785c7238629ff0fd52432ba6794
SHA512
4ca88ec72eb52ff1922313cf3a8f0b2c42c594a557119040a22a6a8ca819f39d9875429ea2ca38143a79afeca994270e420e429d8955ed8f02f5197898787a45
SSDEEP
3072:Y4568SY7Xd8n1fChcFQ1CWHKpDvTBftRhHoXwuQCZHf5s8h:f5zSW2n+cFQPsvTBlRhHoXwu75
resource | yara_rule |
---|---|
sample | family_gh0strat |
Checks for missing Authenticode signature.
resource |
---|
1c5074a72fc892deb085810ba993f4df_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CoCreateInstance
CoTaskMemFree
CoUninitialize
CoInitialize
Sleep
ResetEvent
lstrcatA
GetSystemDirectoryA
FreeLibrary
CreateEventA
DeleteFileA
InitializeCriticalSection
DeleteCriticalSection
VirtualFree
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
VirtualQuery
GetTickCount
LocalFree
LocalSize
TerminateProcess
OpenProcess
Process32Next
LocalReAlloc
lstrlenA
Process32First
LocalAlloc
CreateToolhelp32Snapshot
GetLastError
CreateMutexA
WaitForMultipleObjects
GetLogicalDriveStringsA
CreateThread
ExpandEnvironmentStringsA
CreateDirectoryA
GetFileAttributesA
MoveFileExA
CreateProcessA
GetDriveTypeA
GetDiskFreeSpaceExA
GetVolumeInformationA
FindClose
FindNextFileA
FindFirstFileA
RemoveDirectoryA
GetFileSize
CreateFileA
ReadFile
SetFilePointer
WriteFile
MoveFileA
GetCommandLineA
WinExec
Thread32Next
TerminateThread
OpenThread
Thread32First
GetProcAddress
GetModuleHandleA
SetEvent
GetCurrentThreadId
HeapFree
GetProcessHeap
HeapAlloc
GetShortPathNameA
SetFileAttributesA
GetFileAttributesExA
lstrcmpA
lstrcmpiA
VirtualProtect
GetConsoleTitleA
GetConsoleWindow
SetEnvironmentVariableA
GetWindowsDirectoryA
GetTempPathA
GetCurrentProcess
GetLongPathNameA
GetModuleFileNameA
SetFileTime
GetFileTime
LoadLibraryA
DeviceIoControl
GetVersionExA
GetSystemInfo
GetProcessTimes
GlobalMemoryStatusEx
SetErrorMode
ExitThread
OpenEventA
CopyFileA
FreeLibraryAndExitThread
IsBadReadPtr
IsBadStringPtrW
Module32Next
Module32First
GetTempFileNameA
RaiseException
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalSize
GetConsoleOutputCP
SetConsoleCtrlHandler
ExitProcess
SetConsoleWindowInfo
SetConsoleScreenBufferSize
GetStartupInfoA
GetStdHandle
AllocConsole
FillConsoleOutputCharacterA
FreeConsole
WriteConsoleInputA
GenerateConsoleCtrlEvent
ReadConsoleOutputA
SetConsoleOutputCP
GetConsoleScreenBufferInfo
InterlockedExchange
WaitForSingleObject
CloseHandle
GetCurrentProcessId
WideCharToMultiByte
SysStringLen
SysAllocString
SysFreeString
SelectObject
CreateCompatibleBitmap
GetDIBits
BitBlt
CreateCompatibleDC
DeleteObject
DeleteDC
CreateDIBSection
getsockname
ntohs
send
closesocket
select
recv
gethostname
gethostbyname
socket
htons
connect
setsockopt
WSAIoctl
WSACleanup
WSAStartup
rand
??2@YAPAXI@Z
__CxxFrameHandler
wcsrchr
??1type_info@@UAE@XZ
_adjust_fdiv
_initterm
_memicmp
_stricmp
_strlwr
_strupr
_wcsicmp
_beginthreadex
_CxxThrowException
wcslen
strncat
atol
wcstombs
atoi
time
srand
realloc
strchr
strrchr
malloc
_except_handler3
free
strncpy
strstr
_ftol
ceil
memmove
??3@YAXPAX@Z
AddEmailToAutoComplete
AutoDiscoverAndOpenEmail
DllCanUnloadNow
DllGetClassObject
DllInstall
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ