DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
bff53ed05497dc5d601e981baabafae8_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bff53ed05497dc5d601e981baabafae8_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
bff53ed05497dc5d601e981baabafae8_JaffaCakes118
Size
296KB
MD5
bff53ed05497dc5d601e981baabafae8
SHA1
093167df522705f2b298e1332902a937982125ac
SHA256
49221bec1aad20a6d301455af238cf526d5725136b679a5af96ffde28ef3c942
SHA512
cbde1a6abc768546e5b6c15b47cdd543ea590d85ae488bf7d99b6a539e2884b6d3e0907b5b0f9da2bb702ba6ffe1ac3553e65f65708847d0626010d161ec8556
SSDEEP
6144:hcfJGvmQxitrYExlVsQsISCUlGkFqYV8nVEc9g+1P:yfJGvm3rZxlebISCUlGkFr8n
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bff53ed05497dc5d601e981baabafae8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetFileSize
CreateFileA
GetLastError
Sleep
DeleteFileA
LoadResource
FindResourceA
TerminateThread
GetCurrentProcessId
GetVersionExA
CloseHandle
GetTickCount
QueryPerformanceFrequency
GetCurrentThreadId
GetCurrentProcess
FlushInstructionCache
lstrcmpA
InterlockedDecrement
InterlockedIncrement
LoadLibraryA
GetProcAddress
FreeLibrary
WideCharToMultiByte
lstrcatA
lstrcpyA
GlobalAlloc
GlobalLock
GlobalUnlock
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
HeapDestroy
InitializeCriticalSection
DisableThreadLibraryCalls
ReadFile
lstrlenW
MultiByteToWideChar
GetModuleFileNameA
GetShortPathNameA
QueryPerformanceCounter
LocalFree
lstrlenA
RegEnumValueA
RegDeleteKeyA
RegEnumKeyExA
RegOpenKeyExA
RegDeleteValueA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
ImageList_GetImageCount
ImageList_AddMasked
ImageList_Destroy
ImageList_LoadImageA
ImageList_Create
InitCommonControlsEx
ImageList_Draw
CreateFontIndirectA
CreateFontA
GetStockObject
GetObjectA
GetDeviceCaps
CreateSolidBrush
DeleteObject
CreateCompatibleBitmap
CreateCompatibleDC
SelectObject
BitBlt
DeleteDC
SetBkMode
SetTextColor
SetBkColor
CreatePatternBrush
CreateBitmap
PatBlt
CreateDIBSection
EnumFontFamiliesExA
SetBrushOrgEx
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEABDI@Z
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIABV12@@Z
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?empty@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE_NXZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ
??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
?c_str@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPBGXZ
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$allocator@G@1@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??3@YAXPAX@Z
__CxxFrameHandler
memcpy
memcmp
??2@YAPAXI@Z
_purecall
strtok
difftime
mktime
localtime
time
exit
memset
realloc
memmove
_itoa
wcstol
wcstod
_CxxThrowException
wcscpy
wcslen
_except_handler3
?terminate@@YAXXZ
__dllonexit
_onexit
??1type_info@@UAE@XZ
_initterm
malloc
_adjust_fdiv
free
ReleaseStgMedium
RegisterDragDrop
OleRun
CoUninitialize
CoInitialize
OleLockRunning
CoTaskMemAlloc
StringFromCLSID
CoTaskMemFree
CLSIDFromString
CLSIDFromProgID
OleInitialize
CoCreateInstance
CreateStreamOnHGlobal
OleUninitialize
SysFreeString
VariantChangeType
SafeArrayCreate
GetErrorInfo
SafeArrayAccessData
SafeArrayUnaccessData
VariantCopy
SysStringByteLen
VariantInit
SysAllocStringByteLen
DispCallFunc
LoadRegTypeLi
VariantClear
OleCreateFontIndirect
SysStringLen
SysAllocStringLen
LoadTypeLi
SysAllocString
RegisterTypeLi
ShellExecuteA
URLDownloadToFileA
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
SetWindowLongA
GetWindow
CharNextA
DefWindowProcA
RegisterWindowMessageA
GetClassInfoExA
LoadCursorA
RegisterClassExA
GetWindowLongA
GetSysColor
CheckMenuRadioItem
AppendMenuA
TranslateMessage
DispatchMessageA
ShowWindow
GetComboBoxInfo
SetActiveWindow
MoveWindow
DrawFrameControl
DrawEdge
FrameRect
InflateRect
OffsetRect
GetSysColorBrush
GetMenuItemInfoA
UpdateWindow
CallNextHookEx
GetSystemMetrics
DrawTextA
CreatePopupMenu
GetWindowDC
SystemParametersInfoA
SetRectEmpty
IsWindowVisible
UnhookWindowsHookEx
SetWindowsHookExA
DestroyMenu
LoadImageA
CopyRect
SetCursor
GetKeyState
GetWindowRect
MapWindowPoints
TrackPopupMenu
ScreenToClient
GetMessagePos
MessageBoxA
CreateWindowExA
wsprintfA
GetClassNameA
GetDlgItem
GetParent
IsChild
SetCapture
RedrawWindow
InvalidateRgn
InvalidateRect
GetClientRect
SetWindowPos
CallWindowProcA
DestroyWindow
SendMessageA
ReleaseCapture
CreateAcceleratorTableA
GetDC
ReleaseDC
GetDesktopWindow
IsWindow
BeginPaint
FillRect
EndPaint
GetFocus
SetFocus
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE