DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
ebe355c4308de816d41458547471da6f_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ebe355c4308de816d41458547471da6f_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ebe355c4308de816d41458547471da6f_JaffaCakes118
Size
81KB
MD5
ebe355c4308de816d41458547471da6f
SHA1
d1bee2515b060168e97847284b5b80f960012984
SHA256
4a29a2f9b0aaf9074a46d5bdebca8aff06496b7d49c3baca8825d7fac25739f3
SHA512
6bbc8840fbc73bfbe8ac8900108be5784840205aee28a5a800346995ada5b75d23a3ecd4b42f5cb3297659d76e773b673dfef995a2a3e776dc88605fe4ff0be8
SSDEEP
768:8uiLv1FdW6DDJ14y8AuqsHdjZxDmW+NZAQerK9i37Ygy/lTmsFDWLjPpl:gv1lDvFLsHX+QQerqEYgyMsFDWLF
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ebe355c4308de816d41458547471da6f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateFileA
WriteFile
CloseHandle
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InterlockedIncrement
InterlockedDecrement
MultiByteToWideChar
FreeLibrary
IsDBCSLeadByte
lstrcpynA
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
WideCharToMultiByte
lstrlenW
GetLastError
lstrcatA
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
LockResource
RtlUnwind
DisableThreadLibraryCalls
GetProcessHeap
HeapAlloc
HeapSize
HeapFree
DebugBreak
HeapReAlloc
lstrcmpiA
lstrcpyA
lstrlenA
GetModuleFileNameA
ExitProcess
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
InterlockedExchange
RegCreateKeyExA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteKeyA
RegCloseKey
RegSetValueExA
RegQueryValueExA
RegOpenKeyA
RegDeleteValueA
InitCommonControlsEx
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance
StringFromGUID2
SHGetSpecialFolderPathA
ShellExecuteA
PathFindExtensionA
URLDownloadToFileA
wsprintfA
CharUpperBuffA
MessageBoxA
wsprintfW
CharNextA
InternetOpenA
InternetCloseHandle
InternetOpenUrlA
InternetReadFile
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE