NPAddConnection
NPAddConnection3
NPCancelConnection
NPCloseEnum
NPEnumResource
NPGetCaps
NPGetConnection
NPGetResourceInformation
ServiceMain
Behavioral task
behavioral1
Sample
3f3ba3ef356f49f70bcf158ed4e8fde2_JaffaCakes118.dll
Resource
win7-20240708-en
Target
3f3ba3ef356f49f70bcf158ed4e8fde2_JaffaCakes118
Size
155KB
MD5
3f3ba3ef356f49f70bcf158ed4e8fde2
SHA1
52548c7e0f617a6dffc5ea53af23ccdeaa1d9468
SHA256
0fab0687378842f7057e32e92396dc1dbb93ce33e0486bd7ab4321f6582dc490
SHA512
d2ce59194e109b7d766549f3dfbc9da1f5dd1d1966e5662b94607358fcf68c073c4c29b1ccf93decf6a712bdeaa9c0dc984811d0c0ac5add0b6e614a15756483
SSDEEP
3072:5ORtKm6tPvjUosLefKycXI/vthPscTBftp5znVP3l:8Rz6t1sLeCDI//PscTBlp1nN3l
resource | yara_rule |
---|---|
sample | family_gh0strat |
Checks for missing Authenticode signature.
resource |
---|
3f3ba3ef356f49f70bcf158ed4e8fde2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
NPAddConnection
NPAddConnection3
NPCancelConnection
NPCloseEnum
NPEnumResource
NPGetCaps
NPGetConnection
NPGetResourceInformation
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE