UPSCancelWait
UPSGetState
UPSInit
UPSStop
UPSTurnOff
Behavioral task
behavioral1
Sample
03cdea80d00eb92363300df8a24dac19_JaffaCakes118.dll
Resource
win7-20240903-en
Target
03cdea80d00eb92363300df8a24dac19_JaffaCakes118
Size
156KB
MD5
03cdea80d00eb92363300df8a24dac19
SHA1
e27d706b3721c20cb98ac1ce878893e492b59158
SHA256
05a5bd380c2a88d71e6669d561f6f3fc1f5fa5547767ea8639bb26f90ceb7833
SHA512
1f5836d36826564170545c944eed8b1d1902289a42f70f385a9f527e60d4586a5b2bb85eb81cde4c0fbe4f885ec6a2e32918b82694bcef3e2d676f2d6fd53934
SSDEEP
3072:pplDOZqr1Nq49m+/Vfg+kWhhlcAbLYTBftNraBjgh:pPOZq5Nq441whLYTBlNM
resource | yara_rule |
---|---|
sample | family_gh0strat |
Checks for missing Authenticode signature.
resource |
---|
03cdea80d00eb92363300df8a24dac19_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CloseHandle
Sleep
lstrcpyA
lstrlenA
GetLastError
VirtualQuery
lstrcatA
InitializeCriticalSection
VirtualFree
LeaveCriticalSection
VirtualAlloc
lstrcmpiA
GetProcAddress
GetModuleHandleA
GetTickCount
InterlockedExchange
WideCharToMultiByte
HeapFree
HeapAlloc
GetProcessHeap
GetSystemInfo
GetVersionExA
GetProcessTimes
GetCurrentProcess
GlobalMemoryStatusEx
FreeLibrary
GlobalFree
GlobalAlloc
GetTempFileNameA
GetSystemDirectoryA
GetCurrentProcessId
DeleteFileA
RemoveDirectoryA
ExitThread
GetShortPathNameA
GetModuleFileNameA
IsBadReadPtr
IsBadStringPtrW
GlobalUnlock
GlobalLock
GlobalSize
GetCurrentThreadId
GetLocalTime
MapViewOfFile
CreateFileMappingA
LocalFree
LocalAlloc
ExitProcess
GetExitCodeProcess
LocalSize
LocalReAlloc
MultiByteToWideChar
lstrcmpA
GetPrivateProfileStringA
GetPrivateProfileSectionNamesA
ExpandEnvironmentStringsA
SetUnhandledExceptionFilter
FormatMessageA
IsBadWritePtr
GetFileAttributesExA
SetEnvironmentVariableA
GetTempPathA
GetLongPathNameA
RaiseException
LoadLibraryA
CoUninitialize
CoInitialize
CoCreateInstance
CoTaskMemFree
SysFreeString
GetWindowRect
EnableWindow
ShowWindow
GetWindow
GetClassNameA
wvsprintfA
MessageBoxA
DestroyCursor
LoadCursorA
CloseWindowStation
DestroyWindow
CreateWindowExA
wsprintfA
GetCursorInfo
_onexit
__dllonexit
??1type_info@@UAE@XZ
_adjust_fdiv
_initterm
_stricmp
_memicmp
_strupr
_strlwr
_wcsicmp
realloc
strrchr
_beginthreadex
wcsrchr
wcstombs
strtol
srand
rand
??2@YAPAXI@Z
??3@YAXPAX@Z
__CxxFrameHandler
strchr
strncat
_except_handler3
memmove
ceil
_ftol
strstr
strncpy
_CxxThrowException
wcslen
free
malloc
atoi
UPSCancelWait
UPSGetState
UPSInit
UPSStop
UPSTurnOff
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ