DirectPlayCreate
DirectPlayEnumerate
DirectPlayEnumerateA
DirectPlayEnumerateW
DirectPlayLobbyCreateA
DirectPlayLobbyCreateW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Behavioral task
behavioral1
Sample
JaffaCakes118_5688f5c8046aaa5b9c4f0e1d71e6e78b.dll
Resource
win7-20240729-en
Target
JaffaCakes118_5688f5c8046aaa5b9c4f0e1d71e6e78b
Size
148KB
MD5
5688f5c8046aaa5b9c4f0e1d71e6e78b
SHA1
13cb3470c8469063c54fc763960cc97d73a8ffcf
SHA256
2f0d3ddfc455c78def12192e6b9708562a2640a4e19096411552d2c1ab2222f2
SHA512
2019900d341d5256a9fbb74c2652e2100266b743192ad568258e98f16a77b147a7b13f0a8670a9998edf09889fc9aa024e66356baa2a6f79d6a91907c07dd279
SSDEEP
3072:dcOqt/4opDQkdDIdlyA06726bwtTBftIihnk:dcOqnJcJ06q6bwtTBl3hn
resource | yara_rule |
---|---|
sample | family_gh0strat |
Checks for missing Authenticode signature.
resource |
---|
JaffaCakes118_5688f5c8046aaa5b9c4f0e1d71e6e78b |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SHDeleteKeyA
GetModuleHandleA
CloseHandle
InterlockedExchange
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalSize
lstrlenA
GetSystemInfo
GetVersionExA
GetProcessTimes
GetCurrentProcess
GlobalMemoryStatusEx
GetSystemDirectoryA
HeapFree
GetProcessHeap
VirtualFree
GetTickCount
HeapAlloc
DeleteFileA
RemoveDirectoryA
ExitThread
GetShortPathNameA
GetModuleFileNameA
IsBadReadPtr
IsBadStringPtrW
lstrcmpiA
GetCurrentThreadId
GetProcAddress
VirtualQuery
SetUnhandledExceptionFilter
GetLocalTime
FormatMessageA
IsBadWritePtr
InitializeCriticalSection
LeaveCriticalSection
VirtualAlloc
LocalFree
LocalSize
LocalAlloc
LocalReAlloc
GetLastError
GetTempFileNameA
GetCommandLineA
GetCurrentProcessId
GetFileAttributesExA
lstrcmpA
MultiByteToWideChar
SetEnvironmentVariableA
GetTempPathA
GetLongPathNameA
FreeLibrary
GetPrivateProfileStringA
GetPrivateProfileSectionNamesA
MapViewOfFile
CreateFileMappingA
RaiseException
ExitProcess
LoadLibraryA
GetClassNameA
wsprintfA
CloseWindowStation
LoadCursorA
DestroyCursor
GetCursorInfo
wvsprintfA
MessageBoxA
GetWindow
ShowWindow
EnableWindow
GetWindowRect
CreateWindowExA
DestroyWindow
RegisterServiceCtrlHandlerExA
RegOpenKeyExW
SysFreeString
GetAdaptersInfo
GetProfilesDirectoryA
GetUserProfileDirectoryA
recv
setsockopt
gethostname
getsockname
gethostbyname
closesocket
shutdown
send
select
connect
socket
WSAStartup
WSACleanup
WSAIoctl
__dllonexit
_adjust_fdiv
_initterm
_strupr
??3@YAXPAX@Z
_stricmp
_memicmp
_wcsicmp
_strlwr
wcslen
wcsrchr
_onexit
??2@YAPAXI@Z
__CxxFrameHandler
strstr
realloc
strncat
strrchr
malloc
free
ceil
_beginthreadex
wcstombs
_except_handler3
memmove
_ftol
time
srand
rand
atoi
strncpy
strchr
DirectPlayCreate
DirectPlayEnumerate
DirectPlayEnumerateA
DirectPlayEnumerateW
DirectPlayLobbyCreateA
DirectPlayLobbyCreateW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ