AppCleanup
capCreateCaptureWindowA
capCreateCaptureWindowW
capGetDriverDescriptionA
Behavioral task
behavioral1
Sample
719948fcc7b5a94fa5385af6334566bc_JaffaCakes118.dll
Resource
win7-20240708-en
Target
719948fcc7b5a94fa5385af6334566bc_JaffaCakes118
Size
148KB
MD5
719948fcc7b5a94fa5385af6334566bc
SHA1
aed4d9e87a8c9e96d5ddb3c98d55e0120e46c697
SHA256
9208fe6d08d42a609812665848dd4bb1629c801841ab12e53541d8ba6a17125a
SHA512
6004b4ec80fa1d3300c52f6aa8bb5dddf1054b07b1b53e4d2d6f51be2b5bcd47023aab939c2737fca76c94b4a1d9fac2b12cc140d1e7a4513037651025901518
SSDEEP
3072:RQ4eua3OTgH7s/SM25AJ9QT8b2giYTBftZGIQhiSMhKzeE:Ded3OQoaMTojYTBlZGI20hS/
resource | yara_rule |
---|---|
sample | family_gh0strat |
Checks for missing Authenticode signature.
resource |
---|
719948fcc7b5a94fa5385af6334566bc_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SysFreeString
LoadLibraryA
RaiseException
CloseHandle
lstrcpyA
lstrlenA
WideCharToMultiByte
lstrcatA
Sleep
HeapFree
HeapAlloc
GetProcessHeap
GetSystemInfo
GetVersionExA
GetProcessTimes
GetCurrentProcess
GlobalMemoryStatusEx
GetLastError
FreeLibrary
GlobalFree
GlobalAlloc
GetProcAddress
GetModuleHandleA
GetTempFileNameA
GetSystemDirectoryA
GetTickCount
VirtualFree
DeleteFileA
RemoveDirectoryA
ExitThread
GetShortPathNameA
GetModuleFileNameA
IsBadReadPtr
IsBadStringPtrW
GetCurrentThreadId
lstrcmpiA
LocalFree
LocalSize
InitializeCriticalSection
LeaveCriticalSection
VirtualAlloc
VirtualQuery
GetLocalTime
GlobalUnlock
GlobalLock
GlobalSize
MapViewOfFile
CreateFileMappingA
LocalAlloc
InterlockedExchange
MultiByteToWideChar
lstrcmpA
GetPrivateProfileStringA
GetPrivateProfileSectionNamesA
ExpandEnvironmentStringsA
LocalReAlloc
GetCurrentProcessId
GetFileAttributesExA
SetEnvironmentVariableA
GetTempPathA
GetLongPathNameA
SetUnhandledExceptionFilter
FormatMessageA
IsBadWritePtr
ExitProcess
GetClassNameA
CreateWindowExA
DestroyWindow
GetWindow
ShowWindow
CloseWindowStation
GetWindowRect
LoadCursorA
DestroyCursor
GetCursorInfo
wvsprintfA
EnableWindow
MessageBoxA
wsprintfA
StrStrIA
GetProfilesDirectoryA
GetUserProfileDirectoryA
WSAStartup
WSACleanup
socket
closesocket
gethostbyname
connect
send
select
recv
gethostname
getsockname
shutdown
setsockopt
WSAIoctl
GetAdaptersInfo
free
_onexit
__dllonexit
??3@YAXPAX@Z
??1type_info@@UAE@XZ
_adjust_fdiv
_initterm
_strupr
_stricmp
_memicmp
_strlwr
_wcsicmp
_CxxThrowException
realloc
wcsrchr
_beginthreadex
??2@YAPAXI@Z
ceil
memmove
malloc
strrchr
wcstombs
strstr
_ftol
srand
rand
atoi
strncpy
_except_handler3
strncat
strchr
__CxxFrameHandler
wcslen
AppCleanup
capCreateCaptureWindowA
capCreateCaptureWindowW
capGetDriverDescriptionA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ