DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
e1367b2c75c5a4abd5bc90c95a06bc2d_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e1367b2c75c5a4abd5bc90c95a06bc2d_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
e1367b2c75c5a4abd5bc90c95a06bc2d_JaffaCakes118
Size
61KB
MD5
e1367b2c75c5a4abd5bc90c95a06bc2d
SHA1
602bfb9ff361888983a81d8c91705f68509e1910
SHA256
d11ad6b9ee9beeb14a5480fcb5fe9a530ab69a054bba50516142a294d44c4fa9
SHA512
30deffbadc30b6c6c540b712f02eb6f9a649dba1de5b1f3cc605f3263310a1b116b0c1bc6a32cecf712f70a95f0d5e91fa96a6c6164577baea51e6014ce84847
SSDEEP
768:578F3aZIx/vAwd5QsPaJZoPqRLc82DIWzQp2W4n3U:57/Ix/vAwd5Qs8rAFIW0p2WEU
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
e1367b2c75c5a4abd5bc90c95a06bc2d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GlobalFree
WriteFile
CreateThread
WaitForSingleObject
GetModuleHandleA
GetCurrentProcessId
GetShortPathNameA
GetTickCount
GlobalAlloc
Sleep
CreateFileA
CloseHandle
DeleteFileA
LocalFree
lstrcpynA
DisableThreadLibraryCalls
MultiByteToWideChar
lstrcatA
InterlockedDecrement
LoadLibraryA
GetProcAddress
lstrlenA
FreeLibrary
lstrcpyA
GetExitCodeThread
HeapDestroy
IsDBCSLeadByte
lstrcmpiA
LoadLibraryExA
FindResourceA
LoadResource
SizeofResource
WideCharToMultiByte
GetModuleFileNameA
LeaveCriticalSection
GetLastError
lstrlenW
GetWindowsDirectoryA
EnterCriticalSection
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
OutputDebugStringA
RegEnumKeyExA
RegEnumValueA
RegQueryInfoKeyA
RegSetValueExA
RegCloseKey
RegDeleteValueA
RegCreateKeyExA
RegDeleteKeyA
RegOpenKeyExA
free
_adjust_fdiv
_initterm
?terminate@@YAXXZ
_except_handler3
??1type_info@@UAE@XZ
memcmp
malloc
_purecall
wcslen
realloc
_ftol
memcpy
_mbscmp
atoi
memset
_CxxThrowException
__CxxFrameHandler
__dllonexit
_onexit
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
CharNextA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE