UPSCancelWait
UPSGetState
UPSInit
UPSStop
Behavioral task
behavioral1
Sample
82992ef3ba946ae21b872e749aebb9dd_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
82992ef3ba946ae21b872e749aebb9dd_JaffaCakes118.dll
Resource
win10v2004-20240730-en
Target
82992ef3ba946ae21b872e749aebb9dd_JaffaCakes118
Size
156KB
MD5
82992ef3ba946ae21b872e749aebb9dd
SHA1
1df41db9fd94f001fb389c4c4700ad3a37cacb0c
SHA256
a543bd47bfa7a1ea7b7815bbae2e37e3f77e986091c125bc1017d809f5e198c3
SHA512
d7273564469d013f853b023f1a752d87a437ad30f630d0875136c3b339273ca08db2d4aa91ccb91c70aedd907ee8a9b90df92725d2ffec35b7609b755f609f7a
SSDEEP
3072:JzFcXVcrU4veLPNp1EJE9U6fDdGHklTBftPynu2rQFuYU:JsV342FpGiU6LsElTBlPynu2rQY
resource | yara_rule |
---|---|
sample | family_gh0strat |
Checks for missing Authenticode signature.
resource |
---|
82992ef3ba946ae21b872e749aebb9dd_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
UPSCancelWait
UPSGetState
UPSInit
UPSStop
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ