DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
ea340d415cc97a5032d8a403636b14f2_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ea340d415cc97a5032d8a403636b14f2_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ea340d415cc97a5032d8a403636b14f2_JaffaCakes118
Size
57KB
MD5
ea340d415cc97a5032d8a403636b14f2
SHA1
49e1c78cb099c81da0e03e2e17b51b60db3de839
SHA256
ab93385432311a75ea53411eed459b3a2a1c94eb6400422359ca04cb8565bf08
SHA512
69b346e9db1372a1c2253dbbe8c5091b2116a890b186d1fe23a650651db767c1f09c33aeb70765ffb9183736e4209c664bef8ab58f64bda8d3fe2d08e7ffd096
SSDEEP
768:Cgd8hOuZ1l0Sfp+IVvu2qDeu8UM+OkKNTLJEm103MbCKyjpO:vDu/vV22qDecMdTLJxG3MbCKyj
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ea340d415cc97a5032d8a403636b14f2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InterlockedDecrement
WriteFile
HeapAlloc
GetCurrentProcess
FlushInstructionCache
GetCurrentThreadId
InterlockedIncrement
LoadLibraryA
GetProcAddress
FreeLibrary
lstrcatA
lstrcpyA
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
HeapDestroy
InitializeCriticalSection
DisableThreadLibraryCalls
GetModuleFileNameA
GetShortPathNameA
lstrlenW
MultiByteToWideChar
GetDiskFreeSpaceExA
MoveFileA
DeleteFileA
CloseHandle
HeapFree
CreateThread
WideCharToMultiByte
GetProcessHeap
CreateFileA
lstrlenA
GetTempPathA
WaitForSingleObject
GetExitCodeThread
LPtoDP
CreateRectRgnIndirect
CreateDCA
GetDeviceCaps
RestoreDC
SaveDC
SetMapMode
SetWindowOrgEx
SetViewportOrgEx
DeleteDC
_adjust_fdiv
malloc
_initterm
free
?terminate@@YAXXZ
_except_handler3
_purecall
memcmp
memcpy
strcmp
time
srand
sprintf
strcat
wcscmp
_EH_prolog
__CxxFrameHandler
strcpy
??2@YAPAXI@Z
??3@YAXPAX@Z
strlen
memset
strncpy
CoTaskMemFree
CoCreateInstance
OleRegEnumVerbs
OleRegGetUserType
OleRegGetMiscStatus
OleLoadFromStream
OleSaveToStream
CreateOleAdviseHolder
WriteClassStm
ShellExecuteA
GetClassInfoExA
IsChild
GetFocus
EndPaint
LoadCursorA
BeginPaint
SetFocus
GetParent
RegisterClassExA
GetDC
SetWindowPos
PtInRect
MessageBoxA
EqualRect
IntersectRect
wsprintfA
UnionRect
SetWindowLongA
GetWindowLongA
CallWindowProcA
GetDlgItem
SetWindowTextA
IsWindow
CreateWindowExA
PostMessageA
ReleaseDC
CharNextA
DefWindowProcA
ShowWindow
SetTimer
GetWindowTextA
SendMessageA
KillTimer
SetWindowRgn
OffsetRect
InvalidateRect
GetKeyState
DestroyWindow
GetClientRect
InternetQueryDataAvailable
HttpQueryInfoA
InternetReadFile
InternetCloseHandle
InternetOpenUrlA
InternetOpenA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE