C_DdeCliCallBack
C_DdeSerCallBack
TwunkWndProc
Behavioral task
behavioral1
Sample
2fc54463bb61b7c688a9a30f0a938715_JaffaCakes118.exe
Resource
win7-20240704-en
Target
2fc54463bb61b7c688a9a30f0a938715_JaffaCakes118
Size
172KB
MD5
2fc54463bb61b7c688a9a30f0a938715
SHA1
40688c0a45662e7c0e166b8fd81b03da656d8aad
SHA256
406c410a092d8c46c24f084a9a8a136a139faa352f52283bddbe416e60906f0e
SHA512
5062bd6f7497e7a5c2bc8749b96a1718d01972110a9d18a8a333c6cbcc969a06a6ee95771f91b56c499dc9dcb7da61f35fb1be0cb41c3b16230acc88dd32c91d
SSDEEP
3072:rhya53HDcTze7v/swY7bCa5dpZ674hcAunYkXdkRz+lzyFn6:rhycGBwYqa5dpZ9YYUSuzT
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2fc54463bb61b7c688a9a30f0a938715_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetProcAddress
GetProfileIntA
GetLastError
LoadLibraryA
FreeLibrary
lstrcmpA
GlobalSize
GetVersion
GlobalAlloc
GlobalFree
GlobalFlags
GlobalLock
GlobalUnlock
lstrcatA
ReadFile
DeleteFileA
MultiByteToWideChar
IsBadCodePtr
IsBadWritePtr
IsBadReadPtr
SetUnhandledExceptionFilter
VirtualAlloc
VirtualFree
GetCPInfo
GetOEMCP
GetACP
GetModuleFileNameA
UnhandledExceptionFilter
TlsGetValue
TlsAlloc
TlsSetValue
GetCurrentThreadId
SetEndOfFile
SetStdHandle
GetStdHandle
ExitProcess
LeaveCriticalSection
EnterCriticalSection
GetWindowsDirectoryA
GetCommandLineA
CloseHandle
Sleep
LockFile
UnlockFile
GetFileType
CreateFileA
GetEnvironmentStrings
InitializeCriticalSection
SetFilePointer
WriteFile
RtlUnwind
GetModuleHandleA
GetStartupInfoA
PeekMessageA
DdeQueryConvInfo
DdeConnect
DdeClientTransaction
DdeUninitialize
DdeInitializeA
DdeGetLastError
DdeFreeStringHandle
DdeCreateStringHandleA
wsprintfA
DdeCreateDataHandle
LoadIconA
LoadCursorA
RegisterClassA
CreateWindowExA
GetSystemMenu
ChangeMenuA
ShowWindow
PostQuitMessage
DefWindowProcA
RegisterWindowMessageA
GetMessageA
TranslateMessage
DispatchMessageA
PostMessageA
DdeNameService
DdeDisconnect
DdeGetData
DdePostAdvise
DdeCmpStringHandles
MessageBoxA
GetStockObject
C_DdeCliCallBack
C_DdeSerCallBack
TwunkWndProc
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE