COMResModuleInstance
myIns
Behavioral task
behavioral1
Sample
8a811df89032ffc853874810721ce10d_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8a811df89032ffc853874810721ce10d_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
8a811df89032ffc853874810721ce10d_JaffaCakes118
Size
1008KB
MD5
8a811df89032ffc853874810721ce10d
SHA1
3c384df57f3d89d8f6df760045c5a0644a0e195c
SHA256
91718f5769318199250b98dc94e9339d98e796d9dc47d58d5929de023df8dc31
SHA512
4b191602b9342b3df248b7ad7c9d07b0268fc7dd1253428d9dfb4f05cf684ef96aad88fa1174a1a70cd1c17de8bed6adf164f8dfb626665f509bc32ca93eaf66
SSDEEP
384:w9A/Vs3HOxFR5W+g3q5wo3Hy+KjcjdJie:wWdFW+iyS+k43/
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8a811df89032ffc853874810721ce10d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
RegSetValueExA
RegOpenKeyExA
RegCloseKey
SelectObject
DeleteObject
CreateDCA
GetDeviceCaps
DeleteDC
GetObjectA
GetStockObject
SelectPalette
RealizePalette
GetDIBits
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
GdipCloneImage
GdipAlloc
GdipFree
GdiplusStartup
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipDisposeImage
GdipSaveImageToFile
GdipLoadImageFromFile
Process32Next
TerminateProcess
GetSystemDirectoryA
GetModuleHandleA
DeleteFileA
GetFileSize
ExitProcess
GlobalAlloc
GlobalLock
CreateFileA
WriteFile
GlobalUnlock
GlobalFree
FindNextFileA
MultiByteToWideChar
CompareFileTime
Sleep
Process32First
IsBadReadPtr
OpenProcess
GetModuleFileNameA
FindFirstFileA
VirtualProtect
GetLocalTime
CopyFileA
LoadLibraryA
GetProcAddress
CreateToolhelp32Snapshot
CloseHandle
CreateThread
_adjust_fdiv
_initterm
_access
free
rename
remove
sscanf
fread
strchr
malloc
wcscmp
strncpy
strstr
fgets
strtok
sprintf
fopen
fwrite
fclose
_stricmp
CoCreateInstance
CoInitialize
CoUninitialize
ShellExecuteA
SHGetSpecialFolderPathA
PathFileExistsA
GetDesktopWindow
ReleaseDC
GetWindowRect
GetDC
COMResModuleInstance
myIns
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE