UPSCancelWait
UPSGetState
UPSInit
UPSStop
UPSTurnOff
UPSWaitForStateChange
Static task
static1
Behavioral task
behavioral1
Sample
dc59225f3ece328e98307d68a54536a7_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dc59225f3ece328e98307d68a54536a7_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
dc59225f3ece328e98307d68a54536a7_JaffaCakes118
Size
40KB
MD5
dc59225f3ece328e98307d68a54536a7
SHA1
ee4f6374b1a4415fb08181e62e7a622adeb2da75
SHA256
e3a5c3acb8557ff7733f2cc5935514d1a28f32c4ad620cb8d6d509cdbf8f219a
SHA512
53d9736117a9f4c51a4897253708b9d3bdd7527eaa67108d6db4423b6383c2bff28692ad59204acca601c0c42b3ba0203e950c6b9a41c0c82483671a7c145ab2
SSDEEP
768:1Ahyq/kSGlgoVlwozMOAF0bPhCsGSS9b/sIW1670bZvG+OgL5fL98ATuOeWHaQ7Q:+h+kMFztAF0jhBGN9b/PWdZvLxL9L98X
Checks for missing Authenticode signature.
resource |
---|
dc59225f3ece328e98307d68a54536a7_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
free
RegCloseKey
UPSCancelWait
UPSGetState
UPSInit
UPSStop
UPSTurnOff
UPSWaitForStateChange
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE