DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
b7e5c521f385d0d7c5d2280a582417c9_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b7e5c521f385d0d7c5d2280a582417c9_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b7e5c521f385d0d7c5d2280a582417c9_JaffaCakes118
Size
73KB
MD5
b7e5c521f385d0d7c5d2280a582417c9
SHA1
399c7ca39ecfeef827c8cd55da565521b4be3d4c
SHA256
0b0e8cbe8b2451b1617cbe7e673c846ce8b0a26cb3f3a44579c6e1f7c025db59
SHA512
ea2f86080fb3bf54621b6df1283310253b58c25f96e53e08d45557241f0be6c7f770a96da49dce47d3a5918fa3d6987dc8be202358084fb95b54e49ba5dc82e3
SSDEEP
768:we/5yXGZQDFR6Rhznu4jL+koTvDZMGHZdDS+eL3AS3JOLD0qBhBJConoLm5:weBwGk6sU+BT7ZMwSl3IDnBoonom
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b7e5c521f385d0d7c5d2280a582417c9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WideCharToMultiByte
MultiByteToWideChar
DisableThreadLibraryCalls
GetSystemInfo
HeapCreate
GetShortPathNameA
GetModuleHandleA
GetModuleFileNameA
FreeLibrary
LoadLibraryExA
lstrcmpiA
lstrcpynA
lstrlenA
lstrlenW
FindResourceA
EnterCriticalSection
HeapDestroy
DeleteCriticalSection
GetProcAddress
LoadLibraryA
lstrcatA
InterlockedIncrement
InterlockedDecrement
FlushInstructionCache
GetCurrentProcess
GetCurrentThreadId
IsDBCSLeadByte
SizeofResource
LoadResource
DebugBreak
LockResource
CreateFileA
WriteFile
LeaveCriticalSection
InitializeCriticalSection
SetEndOfFile
CreateProcessA
HeapAlloc
HeapReAlloc
HeapFree
GetLastError
CloseHandle
GetVersionExA
lstrcpyA
GetTempFileNameA
GetTempPathA
RegOpenKeyExA
RegEnumValueA
RegQueryInfoKeyA
RegEnumKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
SetMapMode
CreateDCA
GetDeviceCaps
LPtoDP
SetViewportOrgEx
SaveDC
DeleteDC
SetWindowOrgEx
RestoreDC
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
EndPaint
DefWindowProcA
IsChild
GetClassInfoExA
LoadCursorA
GetFocus
CreateWindowExA
CallWindowProcA
GetWindowLongA
SetWindowLongA
DestroyWindow
BeginPaint
GetClientRect
ReleaseDC
CharNextA
RegisterClassExA
wsprintfA
GetDC
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE