MayaDllMain
ProtectionExe
Behavioral task
behavioral1
Sample
1474d41504bbe7fa460ca09ad6f5a877_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1474d41504bbe7fa460ca09ad6f5a877_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
1474d41504bbe7fa460ca09ad6f5a877_JaffaCakes118
Size
52KB
MD5
1474d41504bbe7fa460ca09ad6f5a877
SHA1
e9eb517e06181c25a44cd7f01db0b605ee590e6b
SHA256
d7bdcb4425039634333ff02df3eaf83d080fb6058579d7ee7bf6dac157cac4e9
SHA512
929418b8f7419e08b8972f445d2f2ff4483136af98c6ee8a4bac0b81614eaa88bd24ffb6cd4cd852a6e969180cb7e537269ded2040bb677741df2001a8541ceb
SSDEEP
384:ZAHxUS5qujzVKnGQmzW6SP6t8U1tEcMYOJQWSXMrE3vRRra/SObnNmbKY:CKS5quXV0GQ7AXPEvC+Cv5OjLY
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
1474d41504bbe7fa460ca09ad6f5a877_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
WinExec
TerminateProcess
Sleep
SetFileAttributesA
ReleaseMutex
OpenProcess
OpenMutexA
OpenFile
GetWindowsDirectoryA
GetTempPathA
GetSystemDirectoryA
GetProcAddress
GetModuleHandleA
GetLastError
GetCurrentProcess
FindFirstFileA
FindClose
FileTimeToLocalFileTime
FileTimeToDosDateTime
DeleteFileA
CreateThread
CreateMutexA
CopyFileA
CloseHandle
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
LocalFree
LocalAlloc
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
VirtualFree
VirtualAlloc
LocalFree
LocalAlloc
GetVersion
GetCurrentThreadId
GetThreadLocale
GetStartupInfoA
GetLocaleInfoA
GetLastError
GetCommandLineA
FreeLibrary
ExitProcess
WriteFile
UnhandledExceptionFilter
SetFilePointer
SetEndOfFile
RtlUnwind
ReadFile
RaiseException
GetStdHandle
GetFileSize
GetFileType
CreateFileA
CloseHandle
RegSetValueExA
RegOpenKeyA
RegCloseKey
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
SendMessageA
GetWindowTextA
GetDesktopWindow
FindWindowExA
FindWindowA
GetKeyboardType
MessageBoxA
InternetGetConnectedState
InternetReadFile
InternetOpenUrlA
InternetOpenA
InternetCloseHandle
HttpQueryInfoA
MayaDllMain
ProtectionExe
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE