CancelCDMOperation
CloseCDMContext
DetFilesDownloaded
DownloadGetUpdatedFiles
DownloadIsInternetAvailable
DownloadUpdatedFiles
FindMatchingDriver
LogDriverNotFound
OpenCDMContext
Windows 7 will be removed from tria.ge on 2025-03-31
Behavioral task
behavioral1
Sample
JaffaCakes118_61ec716c8c6f5f1658e5b6a135939bcb.dll
Resource
win7-20241023-en
Target
JaffaCakes118_61ec716c8c6f5f1658e5b6a135939bcb
Size
148KB
MD5
61ec716c8c6f5f1658e5b6a135939bcb
SHA1
9513e30fb70102cfc2742562f723048b33d990e9
SHA256
367c06c3c7f97648e2390e2346344188ba14864d27032f6ffa13e54392a58c5a
SHA512
5540d960d6440804b43c13c3508251425fd4b99e1f8df3404838dfee82a169d0c2a7e3675af42c84cafadc98c40c1d01bc139f83c1b4aea6b3cd5b93fce9a030
SSDEEP
3072:DBH4gZ0CSzUXffKtrj4VwrqhnlymvgIOxNVTBftW5xrDJeSte:DBJ+tzAe3/y5gIO/VTBlW5hDt
resource | yara_rule |
---|---|
sample | family_gh0strat |
Checks for missing Authenticode signature.
resource |
---|
JaffaCakes118_61ec716c8c6f5f1658e5b6a135939bcb |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
StrStrIA
DestroyWindow
LoadCursorA
DestroyCursor
GetCursorInfo
CreateWindowExA
GetClassNameA
GetWindow
ShowWindow
EnableWindow
GetWindowRect
wvsprintfA
CloseWindowStation
MessageBoxA
wsprintfA
RemoveDirectoryA
RaiseException
CreateFileMappingA
MapViewOfFile
ExitProcess
GlobalSize
GlobalLock
GlobalUnlock
IsBadStringPtrW
IsBadReadPtr
ExitThread
LoadLibraryA
DeleteFileA
GetTempFileNameA
GlobalAlloc
CloseHandle
lstrcpyA
lstrlenA
WideCharToMultiByte
lstrcmpiA
GetProcAddress
GetModuleHandleA
GetTickCount
InterlockedExchange
Sleep
VirtualQuery
MultiByteToWideChar
FreeLibrary
lstrcmpA
GetPrivateProfileStringA
GetPrivateProfileSectionNamesA
GetVersionExA
ExpandEnvironmentStringsA
lstrcatA
LocalFree
GetLastError
LocalReAlloc
LocalSize
LocalAlloc
InitializeCriticalSection
LeaveCriticalSection
GetCurrentProcessId
GetCurrentThreadId
GetShortPathNameA
VirtualAlloc
GetFileAttributesExA
GetSystemDirectoryA
SetEnvironmentVariableA
GetTempPathA
GetCurrentProcess
GetLongPathNameA
GetModuleFileNameA
SetUnhandledExceptionFilter
GetLocalTime
FormatMessageA
IsBadWritePtr
VirtualFree
HeapFree
HeapAlloc
GetProcessHeap
GetSystemInfo
GetProcessTimes
GlobalMemoryStatusEx
GlobalFree
SysFreeString
GetProfilesDirectoryA
GetUserProfileDirectoryA
getsockname
gethostname
setsockopt
WSAIoctl
recv
select
shutdown
connect
gethostbyname
socket
closesocket
WSACleanup
WSAStartup
send
GetAdaptersInfo
_stricmp
_CxxThrowException
strncpy
strchr
_ftol
srand
rand
_except_handler3
__CxxFrameHandler
wcslen
??3@YAXPAX@Z
??2@YAPAXI@Z
realloc
malloc
memmove
ceil
atoi
wcstombs
_onexit
__dllonexit
??1type_info@@UAE@XZ
_adjust_fdiv
_initterm
_strupr
_wcsicmp
strstr
_strlwr
_memicmp
strncat
strrchr
free
wcsrchr
_beginthreadex
CancelCDMOperation
CloseCDMContext
DetFilesDownloaded
DownloadGetUpdatedFiles
DownloadIsInternetAvailable
DownloadUpdatedFiles
FindMatchingDriver
LogDriverNotFound
OpenCDMContext
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ