AutoDialFunc
CmCustomDialDlg
CmCustomHangUp
CmReConnect
GetCustomProperty
InetDialHandler
RasCustomDeleteEntryNotify
RasCustomDial
RasCustomDialDlg
RasCustomEntryDlg
RasCustomHangUp
_AutoDialFunc
Windows 7 will be removed from tria.ge on 2025-03-31
Behavioral task
behavioral1
Sample
JaffaCakes118_62f7e820fab38ac253ac16b1a40b054e.dll
Resource
win7-20240903-en
Target
JaffaCakes118_62f7e820fab38ac253ac16b1a40b054e
Size
152KB
MD5
62f7e820fab38ac253ac16b1a40b054e
SHA1
bddaaf99b28de3a17980066588414d4c77400139
SHA256
3e42c0445df85359d36ea124e79217d3444e5087bb6d415fb66ca37c2dc65115
SHA512
f753e2a6f9d30b07f931c0f02a4288680ec0d761b83ffa71cd0a6ee59eccd5f497995ad57234e4ac0787287e00464b78be173301711c98bbe6fedf429e29e1cd
SSDEEP
3072:k3kPCUsNC7e+hiNkW28FFk42ardLEFHTBfteChECwkwE:kUPkNosHfkLardQFHTBlpECk
resource | yara_rule |
---|---|
sample | family_gh0strat |
Checks for missing Authenticode signature.
resource |
---|
JaffaCakes118_62f7e820fab38ac253ac16b1a40b054e |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrlenA
lstrcpyA
CloseHandle
lstrcmpiA
ExpandEnvironmentStringsA
GetLastError
lstrcatA
LocalFree
LocalReAlloc
LocalAlloc
Sleep
VirtualQuery
GetProcAddress
GetModuleHandleA
GetCurrentProcessId
GetCurrentThreadId
GetShortPathNameA
VirtualAlloc
GetFileAttributesExA
lstrcmpA
GetTickCount
GetSystemDirectoryA
MultiByteToWideChar
SetEnvironmentVariableA
GetTempPathA
GetLongPathNameA
GetModuleFileNameA
LocalSize
GetCurrentProcess
HeapFree
HeapAlloc
GetProcessHeap
GetSystemInfo
GetVersionExA
GetProcessTimes
GlobalMemoryStatusEx
FreeLibrary
GlobalFree
GlobalAlloc
GetTempFileNameA
VirtualFree
DeleteFileA
RemoveDirectoryA
ExitThread
IsBadReadPtr
IsBadStringPtrW
WideCharToMultiByte
GetPrivateProfileStringA
GetPrivateProfileSectionNamesA
InterlockedExchange
GlobalUnlock
GlobalLock
GlobalSize
GetLocalTime
MapViewOfFile
CreateFileMappingA
InitializeCriticalSection
LeaveCriticalSection
SetUnhandledExceptionFilter
FormatMessageA
IsBadWritePtr
ExitProcess
GetExitCodeProcess
RaiseException
LoadLibraryA
CloseWindowStation
wsprintfA
DestroyWindow
CreateWindowExA
wvsprintfA
MessageBoxA
GetCursorInfo
DestroyCursor
LoadCursorA
GetClassNameA
EnableWindow
ShowWindow
GetWindow
StrStrIA
SysFreeString
GetUserProfileDirectoryA
GetProfilesDirectoryA
GetAdaptersInfo
getsockname
gethostname
recv
select
send
shutdown
connect
gethostbyname
socket
closesocket
WSACleanup
WSAStartup
WSAIoctl
setsockopt
_stricmp
srand
rand
realloc
strncpy
strrchr
strstr
_except_handler3
malloc
free
??2@YAPAXI@Z
??3@YAXPAX@Z
__CxxFrameHandler
strchr
atoi
strtol
wcstombs
_beginthreadex
_adjust_fdiv
_initterm
??1type_info@@UAE@XZ
_onexit
__dllonexit
_wcsicmp
_memicmp
_ftol
_strlwr
_strupr
wcsrchr
_CxxThrowException
wcslen
strncat
ceil
memmove
AutoDialFunc
CmCustomDialDlg
CmCustomHangUp
CmReConnect
GetCustomProperty
InetDialHandler
RasCustomDeleteEntryNotify
RasCustomDial
RasCustomDialDlg
RasCustomEntryDlg
RasCustomHangUp
_AutoDialFunc
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ