C_DdeCliCallBack
C_DdeSerCallBack
TwunkWndProc
Behavioral task
behavioral1
Sample
2e6f64d2b9c9ddb1699c0e0c61624d32_JaffaCakes118.exe
Resource
win7-20240903-en
Target
2e6f64d2b9c9ddb1699c0e0c61624d32_JaffaCakes118
Size
172KB
MD5
2e6f64d2b9c9ddb1699c0e0c61624d32
SHA1
8f11526837b8d7376c6a96398e08d76561367eb6
SHA256
070500f90291825016408b500351fe9fb3cb9cfb583df6818f0c4904f1006138
SHA512
f654ccf11342b4064631568334a6c285143590dd2591b6ddbef2d00194c4e18affd28c970239a4fb96ca7eaeaeca4de779317542cd7dc453dcb9f31b59aa562a
SSDEEP
3072:rhya53HDcTzRsDPmjyRA1Yc57edPNG4TF20/aR98pQa:rhycGRuFAbcdPNnFcR98pQa
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2e6f64d2b9c9ddb1699c0e0c61624d32_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetProcAddress
GetProfileIntA
GetLastError
LoadLibraryA
FreeLibrary
lstrcmpA
GlobalSize
GetVersion
GlobalAlloc
GlobalFree
GlobalFlags
GlobalLock
GlobalUnlock
lstrcatA
ReadFile
DeleteFileA
MultiByteToWideChar
IsBadCodePtr
IsBadWritePtr
IsBadReadPtr
SetUnhandledExceptionFilter
VirtualAlloc
VirtualFree
GetCPInfo
GetOEMCP
GetACP
GetModuleFileNameA
UnhandledExceptionFilter
TlsGetValue
TlsAlloc
TlsSetValue
GetCurrentThreadId
SetEndOfFile
SetStdHandle
GetStdHandle
ExitProcess
LeaveCriticalSection
EnterCriticalSection
GetWindowsDirectoryA
GetCommandLineA
CloseHandle
Sleep
LockFile
UnlockFile
GetFileType
CreateFileA
GetEnvironmentStrings
InitializeCriticalSection
SetFilePointer
WriteFile
RtlUnwind
GetModuleHandleA
GetStartupInfoA
PeekMessageA
DdeQueryConvInfo
DdeConnect
DdeClientTransaction
DdeUninitialize
DdeInitializeA
DdeGetLastError
DdeFreeStringHandle
DdeCreateStringHandleA
wsprintfA
DdeCreateDataHandle
LoadIconA
LoadCursorA
RegisterClassA
CreateWindowExA
GetSystemMenu
ChangeMenuA
ShowWindow
PostQuitMessage
DefWindowProcA
RegisterWindowMessageA
GetMessageA
TranslateMessage
DispatchMessageA
PostMessageA
DdeNameService
DdeDisconnect
DdeGetData
DdePostAdvise
DdeCmpStringHandles
MessageBoxA
GetStockObject
C_DdeCliCallBack
C_DdeSerCallBack
TwunkWndProc
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE