UPSCancelWait
UPSGetState
UPSInit
UPSStop
UPSTurnOff
Behavioral task
behavioral1
Sample
36b4b8e89262e29707510552cd85ac9d_JaffaCakes118.dll
Resource
win7-20240704-en
Target
36b4b8e89262e29707510552cd85ac9d_JaffaCakes118
Size
152KB
MD5
36b4b8e89262e29707510552cd85ac9d
SHA1
e6c2eb1fd34ca0ec8305dc14bd6532bd8304d658
SHA256
7d7fb9efdcce8d8a2385cc8dd51e0684daeed6ca1f0920033748e5b94ca2632d
SHA512
e070fa2f9e0200af6a7fc796fc455c0b7266cda71581b5a3fc470e2d4c41b33cf92fec7c4885dab1304a533e305d5caaa2e459dc45e62eed4f818a007e6febdb
SSDEEP
3072:XqgQW0D//IJ6zracUyZEyWT84f2wW27TBftybRazhb088:X9Fd6zOcUyZ5Zfwb7TBlybRazU
resource | yara_rule |
---|---|
sample | family_gh0strat |
Checks for missing Authenticode signature.
resource |
---|
36b4b8e89262e29707510552cd85ac9d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CloseWindowStation
LoadCursorA
DestroyCursor
GetCursorInfo
MessageBoxA
CreateWindowExA
DestroyWindow
GetClassNameA
GetWindow
ShowWindow
EnableWindow
wsprintfA
wvsprintfA
RemoveDirectoryA
RaiseException
GetLongPathNameA
GetTempPathA
SetEnvironmentVariableA
GetFileAttributesExA
CreateFileMappingA
MapViewOfFile
GlobalSize
lstrcatA
GetModuleFileNameA
SetUnhandledExceptionFilter
CloseHandle
GetLocalTime
FormatMessageA
GetModuleHandleA
VirtualQuery
IsBadWritePtr
InitializeCriticalSection
GetTickCount
GetLastError
InterlockedExchange
LeaveCriticalSection
Sleep
MultiByteToWideChar
lstrlenA
FreeLibrary
GetProcAddress
WideCharToMultiByte
lstrcpyA
lstrcmpA
GetPrivateProfileStringA
GetPrivateProfileSectionNamesA
GetVersionExA
lstrcmpiA
ExpandEnvironmentStringsA
LocalFree
LocalSize
LocalAlloc
LocalReAlloc
GetCurrentProcess
HeapFree
HeapAlloc
GetProcessHeap
GetSystemInfo
GetProcessTimes
GlobalMemoryStatusEx
GlobalFree
GlobalAlloc
GetTempFileNameA
GetSystemDirectoryA
GetCurrentProcessId
VirtualFree
DeleteFileA
LoadLibraryA
ExitThread
GetShortPathNameA
IsBadReadPtr
IsBadStringPtrW
ExitProcess
GetExitCodeProcess
VirtualAlloc
GetCurrentThreadId
GlobalUnlock
GlobalLock
wcstombs
_adjust_fdiv
_initterm
??1type_info@@UAE@XZ
_onexit
__dllonexit
_stricmp
_memicmp
_strupr
_strlwr
_wcsicmp
__CxxFrameHandler
??3@YAXPAX@Z
strncpy
??2@YAPAXI@Z
_CxxThrowException
_ftol
atoi
strchr
rand
srand
strtol
strstr
_except_handler3
strncat
free
malloc
strrchr
memmove
ceil
wcslen
_beginthreadex
wcsrchr
realloc
UPSCancelWait
UPSGetState
UPSInit
UPSStop
UPSTurnOff
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ