COMResModuleInstance
UHbabNASBBAS
Behavioral task
behavioral1
Sample
ae835d775b99c5b3eb6d617548b0e788_JaffaCakes118.dll
Resource
win7-20240704-en
Target
ae835d775b99c5b3eb6d617548b0e788_JaffaCakes118
Size
38KB
MD5
ae835d775b99c5b3eb6d617548b0e788
SHA1
ba3a8a67b2cbc72f8e8e9185b48debe851e81f9a
SHA256
c9477282dd94953ddf423b018eaa5ae3933f6dcd654486ea6628f846532fa302
SHA512
36b01a0834c97d66fb9316df3f48c4c5acbbb574d2673b08e7f03bb004086862a43f7fb7eed2b822a9c390b9ae9ef688a712b23d89da5f765882a8efe3bc8a1c
SSDEEP
768:72wkg1Yn1Xqt8KMOoIrgmdcJdDOmP73njnzekACbZrr:7/pYIt8KMOoItcemP73njnzekACbZ/
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ae835d775b99c5b3eb6d617548b0e788_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
htons
inet_addr
socket
recv
send
connect
closesocket
WSACleanup
inet_ntoa
gethostbyname
WSAStartup
CoInitialize
CoCreateInstance
CoUninitialize
PathFileExistsA
_adjust_fdiv
_access
_initterm
free
_onexit
__dllonexit
rename
sscanf
fread
strchr
malloc
wcscmp
atoi
strncpy
strstr
remove
strncat
fopen
strtok
fgets
sprintf
fwrite
fclose
_stricmp
GdipLoadImageFromFile
GdipCloneImage
GdipAlloc
GdipGetImageEncodersSize
GdipDisposeImage
GdipSaveImageToFile
GdipGetImageEncoders
GdiplusStartup
GdipFree
Netbios
ord537
ord800
GetLocalTime
GetModuleHandleA
CreateEventA
GetSystemDirectoryA
GetFileSize
ExitProcess
GlobalAlloc
GlobalLock
CreateFileA
WriteFile
GlobalUnlock
GlobalFree
FindNextFileA
FindFirstFileA
MultiByteToWideChar
CompareFileTime
Sleep
WaitForSingleObject
IsBadReadPtr
SetEvent
CloseHandle
CreateToolhelp32Snapshot
GetModuleFileNameA
Process32Next
TerminateProcess
OpenProcess
CreateThread
DeleteFileA
VirtualProtect
CopyFileA
LoadLibraryA
GetProcAddress
Process32First
GetKeyboardState
MapVirtualKeyA
DrawTextA
FillRect
GetDC
ToAscii
ReleaseDC
GetWindowRect
GetDesktopWindow
CreateFontA
DeleteDC
CreateDCA
GetDeviceCaps
GetObjectA
GetStockObject
SelectPalette
RealizePalette
GetDIBits
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
SelectObject
SetTextColor
CreateSolidBrush
SetBkMode
DeleteObject
RegSetValueExA
RegOpenKeyExA
RegCloseKey
ShellExecuteA
SHGetSpecialFolderPathA
COMResModuleInstance
UHbabNASBBAS
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ