Activate
DllCanUnloadNow
DllGetClassObject
HookProc
Logoff
Logon
retProc
Behavioral task
behavioral1
Sample
0f26ee3e19fc1e5525ed90812a65e0c6_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0f26ee3e19fc1e5525ed90812a65e0c6_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
0f26ee3e19fc1e5525ed90812a65e0c6_JaffaCakes118
Size
31KB
MD5
0f26ee3e19fc1e5525ed90812a65e0c6
SHA1
a17ed3a3332814ea246d998fffc503e1a6502df1
SHA256
c5d3739c883f322da82740ce5c351dfcbd148b6ee794339f83a751210a44da8a
SHA512
662f1643a6447b33c748c1a6bb75c50c0eadddca2ee963ca750f560631b67785fed2c43c0e0b7792437b20b87754fee17be80cba61938f55a80083c4d11d8267
SSDEEP
384:5+B0jnGCK+qWkNZ31evMcUsmvCQOih3oWMBRBOjitTg5EXkmCzqdqWjaEup/aQ:5/Xg516KRNOih3ovBRJtTvkhzMqW2
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0f26ee3e19fc1e5525ed90812a65e0c6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateIconFromResourceEx
CreateMenu
CreatePopupMenu
DefDlgProcA
DialogBoxParamA
CreateDialogParamA
DrawTextA
EnableWindow
EndDeferWindowPos
EndDialog
GetCursor
CreateDialogIndirectParamA
CreateDesktopA
CreateAcceleratorTableA
CharUpperA
CharToOemBuffA
CharLowerA
DrawMenuBar
BeginPaint
SetLastError
SetEndOfFile
OpenFileMappingA
GetVersion
GetPrivateProfileStringA
GetModuleHandleA
lstrcpynA
Activate
DllCanUnloadNow
DllGetClassObject
HookProc
Logoff
Logon
retProc
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ