InstallService
ServiceMain
VistaServiceMain
main
setup
Behavioral task
behavioral1
Sample
a30349cc2fb007812495b5326d7d1548_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a30349cc2fb007812495b5326d7d1548_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a30349cc2fb007812495b5326d7d1548_JaffaCakes118
Size
120KB
MD5
a30349cc2fb007812495b5326d7d1548
SHA1
ee776e30ad001f1941fb447d29aceb7f715ab10a
SHA256
c09e615cabc3a1d2978082728fa15f1e6a2985062098199fbf1707c5861ba411
SHA512
20499e136ce6680f1cd9e0b456d538e6416ff7b3fa201344a1093650335874b99ffb52db4ab700e3074533de8d02cfa555f571e0dc1e57fdfa69f80818ed8739
SSDEEP
3072:alK/2UT2loXguHvjTGygGucp0Yf/XXIVzG+xfMnJ:AK/PaCQsvjqEu89fvXKzGAc
resource | yara_rule |
---|---|
sample | family_gh0strat |
Checks for missing Authenticode signature.
resource |
---|
a30349cc2fb007812495b5326d7d1548_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InstallService
ServiceMain
VistaServiceMain
main
setup
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ