INTERNAL__AsyncBinaryTrace
INTERNAL__AsyncStringTrace
INTERNAL__DebugAssert
INTERNAL__FlushAsyncTrace
INTERNAL__InitAsyncTrace
INTERNAL__SetAsyncTraceParams
INTERNAL__TermAsyncTrace
Behavioral task
behavioral1
Sample
96b28607db6f667081494b65c8f023a3_JaffaCakes118.dll
Resource
win7-20240704-en
Target
96b28607db6f667081494b65c8f023a3_JaffaCakes118
Size
152KB
MD5
96b28607db6f667081494b65c8f023a3
SHA1
2b0ec7ff61b4db0dd9e3ba1932c5169e2c857266
SHA256
ad76300f5bf46b4e0d7ff4b390dbb5a4a9b20bd0dab9559ef35bca6aca6366f6
SHA512
9275e938a9d2ef08e3399c83f554c298afe8dd77a8bdf93500bb63e7bdbaf58a6f0f3a9e151eff70a0c3e16e55520896fe35d55020ecf5fda4a85b545a2c8470
SSDEEP
3072:KtsfFzEKUHSaFRQWw270zot0iUulzQTBftz2WdK3HVV:esN1iwc7dt0EzQTBlz2Wd
resource | yara_rule |
---|---|
sample | family_gh0strat |
Checks for missing Authenticode signature.
resource |
---|
96b28607db6f667081494b65c8f023a3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SysFreeString
GetCursorInfo
LoadCursorA
CloseWindowStation
DestroyWindow
CreateWindowExA
wvsprintfA
GetWindowRect
ShowWindow
GetWindow
GetClassNameA
MessageBoxA
wsprintfA
DestroyCursor
StrStrIA
RemoveDirectoryA
RaiseException
VirtualAlloc
VirtualFree
LeaveCriticalSection
InitializeCriticalSection
InterlockedIncrement
InterlockedDecrement
GetExitCodeProcess
ExitProcess
IsBadStringPtrW
IsBadReadPtr
ExitThread
LoadLibraryA
DeleteFileA
GlobalMemoryStatusEx
Sleep
GetCurrentThreadId
CloseHandle
lstrcmpiA
lstrcpyA
GetTempFileNameA
lstrcatA
lstrlenA
MultiByteToWideChar
FreeLibrary
GetProcAddress
WideCharToMultiByte
lstrcmpA
GetPrivateProfileStringA
GetPrivateProfileSectionNamesA
GetVersionExA
ExpandEnvironmentStringsA
VirtualQuery
GetModuleHandleA
GetCurrentProcessId
GetTickCount
GetSystemDirectoryA
SetEnvironmentVariableA
GetTempPathA
GetLongPathNameA
GetLastError
GetModuleFileNameA
LocalFree
LocalReAlloc
LocalAlloc
LocalSize
GetCurrentProcess
InterlockedExchange
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalSize
SetUnhandledExceptionFilter
GetLocalTime
FormatMessageA
IsBadWritePtr
HeapFree
GetProcessHeap
MapViewOfFile
CreateFileMappingA
GetShortPathNameA
HeapAlloc
GetSystemInfo
GetProcessTimes
GetUserProfileDirectoryA
GetProfilesDirectoryA
GetAdaptersInfo
getsockname
setsockopt
closesocket
WSAStartup
listen
gethostname
WSACleanup
bind
socket
connect
accept
send
ioctlsocket
__WSAFDIsSet
select
recv
shutdown
gethostbyname
WSAIoctl
wcstombs
strrchr
malloc
??1type_info@@UAE@XZ
_onexit
__dllonexit
_adjust_fdiv
_initterm
_memicmp
_wcsicmp
_strupr
_strlwr
ceil
memmove
strncat
_CxxThrowException
__CxxFrameHandler
strchr
atoi
strncpy
wcslen
wcsrchr
_except_handler3
_beginthreadex
_ftol
srand
rand
free
realloc
??2@YAPAXI@Z
??3@YAXPAX@Z
strstr
INTERNAL__AsyncBinaryTrace
INTERNAL__AsyncStringTrace
INTERNAL__DebugAssert
INTERNAL__FlushAsyncTrace
INTERNAL__InitAsyncTrace
INTERNAL__SetAsyncTraceParams
INTERNAL__TermAsyncTrace
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ