UPSCancelWait
UPSGetState
UPSInit
UPSStop
Behavioral task
behavioral1
Sample
1bf26a8c5066aea10ad0c558bfcdd6fe_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1bf26a8c5066aea10ad0c558bfcdd6fe_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
1bf26a8c5066aea10ad0c558bfcdd6fe_JaffaCakes118
Size
1.6MB
MD5
1bf26a8c5066aea10ad0c558bfcdd6fe
SHA1
f43952f169cddc28d238c92d08ef99da4b7e3bcc
SHA256
0d4786d2e47a23017eccd76e03047f2e83027cd88bc37e5d59fa5ea48b472397
SHA512
08f88543e2c6f616a3fb03d80654979bae99a51127845b0558744ce74633323dd39d8f23fca8f36ea81d37d42817e1c657e46f62ca3ab1a2d99615a068430df0
SSDEEP
3072:kooCeE+9mIiyNgahiGjpz1qTS6yjTBftvn3cn7r4noKLmvTJHYnrUX6+F:khCwZiyRhdfqlyjTBlvnsn7UXqTJ62
resource | yara_rule |
---|---|
sample | family_gh0strat |
Checks for missing Authenticode signature.
resource |
---|
1bf26a8c5066aea10ad0c558bfcdd6fe_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
UPSCancelWait
UPSGetState
UPSInit
UPSStop
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ