UPSCancelWait
UPSGetState
UPSInit
UPSStop
Behavioral task
behavioral1
Sample
c15d00a6af03f871d17e5d0b60f53dec_JaffaCakes118.dll
Resource
win7-20240704-en
Target
c15d00a6af03f871d17e5d0b60f53dec_JaffaCakes118
Size
148KB
MD5
c15d00a6af03f871d17e5d0b60f53dec
SHA1
20ffdd4db062970c75b880fedbc3f8badb4b0064
SHA256
404b6d2fe520ebeae6c94e3c71657eda7434cebfb4cb3350f34c7ecc70945b97
SHA512
276cc2272caed7e895fab89d4332d1a9f91d5361e75ccd27db0ecc4e1e00e448a3e191b1d622a1240d61683ce511255836f7c9e64406df59974b3d8d2a7d95b6
SSDEEP
3072:Du2rSsg6WCxLJ+H1a84zb7JdDshoEaTBftkcEny4L:S2LgGwHc5vjS9aTBlNEn3L
resource | yara_rule |
---|---|
sample | family_gh0strat |
Checks for missing Authenticode signature.
resource |
---|
c15d00a6af03f871d17e5d0b60f53dec_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SysFreeString
StrStrIA
CloseWindowStation
GetClassNameA
GetWindow
ShowWindow
wsprintfA
GetWindowRect
wvsprintfA
LoadCursorA
DestroyCursor
GetCursorInfo
CreateWindowExA
DestroyWindow
MessageBoxA
EnableWindow
GetLongPathNameA
RaiseException
CreateFileMappingA
MapViewOfFile
GetPrivateProfileSectionNamesA
GetPrivateProfileStringA
WideCharToMultiByte
LocalSize
IsBadWritePtr
FormatMessageA
GetLocalTime
SetUnhandledExceptionFilter
LoadLibraryA
GetTempPathA
SetEnvironmentVariableA
MultiByteToWideChar
CloseHandle
InterlockedExchange
Sleep
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalSize
ExpandEnvironmentStringsA
GetLastError
lstrcpyA
lstrlenA
lstrcatA
LocalFree
LocalReAlloc
LocalAlloc
lstrcmpiA
GetProcAddress
GetModuleHandleA
InitializeCriticalSection
VirtualFree
LeaveCriticalSection
VirtualAlloc
GetTickCount
ExitProcess
GetSystemDirectoryA
HeapFree
HeapAlloc
GetProcessHeap
GetSystemInfo
GetVersionExA
GetProcessTimes
GetCurrentProcess
GlobalMemoryStatusEx
FreeLibrary
GetTempFileNameA
DeleteFileA
RemoveDirectoryA
ExitThread
GetShortPathNameA
GetModuleFileNameA
IsBadReadPtr
IsBadStringPtrW
VirtualQuery
GetCurrentProcessId
GetCurrentThreadId
GetFileAttributesExA
lstrcmpA
GetProfilesDirectoryA
GetUserProfileDirectoryA
WSAIoctl
shutdown
recv
select
send
setsockopt
socket
closesocket
WSACleanup
WSAStartup
getsockname
gethostname
connect
gethostbyname
GetAdaptersInfo
_wcsicmp
ceil
memmove
strchr
strrchr
strstr
_except_handler3
malloc
free
__CxxFrameHandler
??2@YAPAXI@Z
??3@YAXPAX@Z
strncpy
atoi
rand
srand
wcstombs
wcsrchr
_adjust_fdiv
_initterm
??1type_info@@UAE@XZ
_onexit
__dllonexit
_memicmp
_stricmp
_strlwr
_ftol
_strupr
_CxxThrowException
_beginthreadex
wcslen
strncat
realloc
UPSCancelWait
UPSGetState
UPSInit
UPSStop
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ