DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
7061e5dcc23d129cfdbfe6767a3e80f5_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
7061e5dcc23d129cfdbfe6767a3e80f5_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
7061e5dcc23d129cfdbfe6767a3e80f5_JaffaCakes118
Size
201KB
MD5
7061e5dcc23d129cfdbfe6767a3e80f5
SHA1
89299d010f96c4e0706a13b795687dc9f18ae166
SHA256
c17f33a79971cb1d16f3a1e8802ed9ade29f2f566b73d962b29d3dc8804369fa
SHA512
b862a0e88fef3560195cf1b741689c3d1fbb63c803d73a3514d646667bc88770032cf88f4d50127f8353f057e04794c0ec93d01846e236a93349dc5d76f1f825
SSDEEP
3072:D9DP3KwZId4ZtbdI+8fqiOxke2b26/ryg0VOxS9T:D9DfKwm2xkeojr2VOs
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
7061e5dcc23d129cfdbfe6767a3e80f5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetCurrentProcess
HeapFree
GetProcessHeap
HeapAlloc
lstrlenA
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
UnmapViewOfFile
MapViewOfFile
GetTickCount
GetCurrentThreadId
LocalFree
GetLastError
GetModuleFileNameA
WideCharToMultiByte
lstrlenW
CloseHandle
WriteFile
lstrcmpiA
DebugBreak
OutputDebugStringA
DisableThreadLibraryCalls
CreateFileMappingA
GetShortPathNameA
lstrcpynA
lstrcpyA
lstrcatA
IsDBCSLeadByte
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
GetModuleHandleA
GlobalUnlock
GlobalLock
GlobalAlloc
MulDiv
lstrcmpA
FlushInstructionCache
LoadLibraryA
IsBadCodePtr
IsBadReadPtr
LCMapStringW
GetCurrentProcessId
QueryPerformanceCounter
UnhandledExceptionFilter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetStringTypeW
GetStringTypeA
HeapSize
TerminateProcess
SetUnhandledExceptionFilter
IsBadWritePtr
VirtualFree
HeapCreate
HeapDestroy
GetProcAddress
TlsGetValue
TlsSetValue
TlsFree
SetLastError
TlsAlloc
GetCPInfo
GetOEMCP
ExitProcess
GetCommandLineA
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
HeapReAlloc
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetSystemTimeAsFileTime
LCMapStringA
RtlUnwind
RegCreateKeyA
RegCreateKeyExA
RegEnumKeyExA
RegQueryInfoKeyA
RegOpenKeyExA
RegSetValueExA
RegCloseKey
RegDeleteKeyA
RegDeleteValueA
RegQueryValueExA
GetStockObject
GetObjectA
GetDeviceCaps
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
DeleteDC
SelectObject
DeleteObject
CreateSolidBrush
OleLockRunning
OleUninitialize
CLSIDFromProgID
CLSIDFromString
OleInitialize
CreateStreamOnHGlobal
StringFromGUID2
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc
CoGetClassObject
CoCreateInstance
VariantInit
SysAllocStringLen
SysAllocString
LoadTypeLi
VariantClear
SysFreeString
OleCreateFontIndirect
SysStringByteLen
SysStringLen
LoadRegTypeLi
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
VariantChangeType
PathFindExtensionA
SHDeleteKeyA
SetWindowTextA
DestroyWindow
IsWindow
SetWindowLongA
ShowWindow
SetFocus
IsChild
GetClassInfoExA
wsprintfA
LoadCursorA
LoadStringA
GetFocus
UnregisterClassA
CreateAcceleratorTableA
GetParent
GetClassNameA
RedrawWindow
GetDlgItem
GetWindow
BeginPaint
EndPaint
GetSysColor
GetDesktopWindow
InvalidateRgn
InvalidateRect
ReleaseDC
GetDC
FillRect
SetCapture
ReleaseCapture
DestroyAcceleratorTable
GetWindowTextLengthA
GetWindowTextA
SetWindowPos
RegisterWindowMessageA
SendMessageA
CallWindowProcA
GetWindowLongA
wvsprintfA
CharNextA
GetClientRect
CreateWindowExA
RegisterClassExA
DefWindowProcA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE