DirectSoundCaptureCreate
DirectSoundCaptureCreate8
DirectSoundCaptureEnumerateA
DirectSoundCaptureEnumerateW
DirectSoundCreate
DirectSoundCreate8
DirectSoundEnumerateA
DirectSoundEnumerateW
DirectSoundFullDuplexCreate
DllCanUnloadNow
Behavioral task
behavioral1
Sample
d08c45657f4700168876f80bacff4129_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d08c45657f4700168876f80bacff4129_JaffaCakes118
Size
148KB
MD5
d08c45657f4700168876f80bacff4129
SHA1
4c5df1aaba3be4f0eae93481b32c91f2d37ae9e9
SHA256
9e99ac77658ecbf8f5436ec089a662729938881f54181fadda908a029d23484a
SHA512
72fdd451b451ca4c190d24381b33d87e9726fe904d0ebabe5d09da4c2b1a73b10961cb27a8916ecdffad859195648bfc6782de4692650ffb180a865dc984baec
SSDEEP
3072:lH7Jlz8jRq2inPTw6T7+gLqQUY7neAp3fTBftTanxKq8tV/:htlz8EJ7T/eY7eq3fTBlTanx18j
resource | yara_rule |
---|---|
sample | family_gh0strat |
Checks for missing Authenticode signature.
resource |
---|
d08c45657f4700168876f80bacff4129_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SysFreeString
SHDeleteKeyA
CoUninitialize
CoCreateInstance
CoTaskMemFree
CoInitialize
RaiseException
GetTempFileNameA
GlobalAlloc
GlobalFree
GetTickCount
CloseHandle
ExitProcess
lstrcatA
lstrlenA
lstrcpyA
GetSystemDirectoryA
WinExec
Sleep
VirtualQuery
GetProcAddress
GetModuleHandleA
GetCurrentProcessId
GetCurrentThreadId
HeapFree
GetProcessHeap
HeapAlloc
GetShortPathNameA
VirtualAlloc
GetLastError
GetFileAttributesExA
lstrcmpA
lstrcmpiA
MultiByteToWideChar
SetEnvironmentVariableA
GetTempPathA
GetCurrentProcess
GetLongPathNameA
GetModuleFileNameA
InitializeCriticalSection
VirtualFree
LeaveCriticalSection
GetLocalTime
GlobalUnlock
GlobalLock
GlobalSize
MapViewOfFile
CreateFileMappingA
LocalFree
LocalAlloc
GetVersionExA
SetUnhandledExceptionFilter
FormatMessageA
IsBadWritePtr
GetSystemInfo
GetProcessTimes
GlobalMemoryStatusEx
GetCommandLineA
DeleteFileA
RemoveDirectoryA
ExitThread
IsBadReadPtr
IsBadStringPtrW
InterlockedExchange
FreeLibrary
WideCharToMultiByte
ExpandEnvironmentStringsA
LocalReAlloc
LoadLibraryA
LocalSize
GetPrivateProfileStringA
GetPrivateProfileSectionNamesA
RegisterServiceCtrlHandlerExA
RegOpenKeyExW
QueryServiceStatusEx
SHFileOperationA
GetUserProfileDirectoryA
GetProfilesDirectoryA
GetAdaptersInfo
select
recv
send
connect
closesocket
getsockname
gethostname
gethostbyname
socket
WSAStartup
WSACleanup
setsockopt
WSAIoctl
shutdown
strrchr
memmove
_adjust_fdiv
_initterm
_onexit
__dllonexit
_memicmp
_strupr
_wcsicmp
_stricmp
_strlwr
strncat
atol
wcslen
wcsrchr
free
wcstombs
strchr
atoi
strncpy
_beginthreadex
??2@YAPAXI@Z
ceil
_ftol
srand
rand
malloc
__CxxFrameHandler
??3@YAXPAX@Z
_except_handler3
strstr
realloc
DirectSoundCaptureCreate
DirectSoundCaptureCreate8
DirectSoundCaptureEnumerateA
DirectSoundCaptureEnumerateW
DirectSoundCreate
DirectSoundCreate8
DirectSoundEnumerateA
DirectSoundEnumerateW
DirectSoundFullDuplexCreate
DllCanUnloadNow
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ