DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
33fe1c1a642ac28f1badb278637144cb_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
33fe1c1a642ac28f1badb278637144cb_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
33fe1c1a642ac28f1badb278637144cb_JaffaCakes118
Size
48KB
MD5
33fe1c1a642ac28f1badb278637144cb
SHA1
3d54aea62981f0bfddb07142558719c7efa9bb0d
SHA256
42e8c6565788ed0d4aea6b3ec40fbb2c9de693552293843ced0db7e4ecbccbdc
SHA512
7fc6c4a0e8b9a4f7773afc72e69cc2b66f20a6b23fef30806b440fc374fabcf0bba2358a476cdf75eb4d75dadfeba13e39a91399f7c73daa4db8f2a9e7a5da0b
SSDEEP
384:sjBH50avGVldUIvRiBdZikVJIJdZlFjHqQBZ2LxOFuCJNWt2EHcbqk6sz:KH9od5iBdZiYGbpByMFtQ2EHcbLFz
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
33fe1c1a642ac28f1badb278637144cb_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrcatA
CreateDirectoryA
lstrcmpiA
lstrcpynA
GetShortPathNameA
DeleteFileA
CreateFileA
GlobalAlloc
WriteFile
GlobalFree
WaitForSingleObject
GetExitCodeThread
OutputDebugStringA
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
lstrlenW
MultiByteToWideChar
lstrlenA
TerminateProcess
GetModuleHandleA
GetModuleFileNameA
WideCharToMultiByte
FreeLibrary
SizeofResource
LoadResource
FindResourceA
GetLastError
LoadLibraryExA
lstrcpyA
OpenProcess
IsDBCSLeadByte
HeapDestroy
GetProcAddress
LoadLibraryA
CreateThread
CloseHandle
TerminateThread
RegEnumKeyExA
RegEnumValueA
RegQueryInfoKeyA
RegSetValueExA
RegDeleteKeyA
RegOpenKeyExA
RegCloseKey
RegDeleteValueA
RegCreateKeyExA
?terminate@@YAXXZ
_adjust_fdiv
??1type_info@@UAE@XZ
memcmp
memset
realloc
_initterm
_except_handler3
__CxxFrameHandler
_CxxThrowException
malloc
free
_purecall
memcpy
CoCreateInstance
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc
ShellExecuteA
DialogBoxParamA
GetWindowThreadProcessId
GetParent
SetWindowLongA
GetWindowLongA
MoveWindow
CharNextA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE