DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetClassInfoForCurrentUser
GetDefaultPartitionForCurrentUser
Behavioral task
behavioral1
Sample
04cf06a1309a49a83ab599cf09cee719_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
04cf06a1309a49a83ab599cf09cee719_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
04cf06a1309a49a83ab599cf09cee719_JaffaCakes118
Size
1.1MB
MD5
04cf06a1309a49a83ab599cf09cee719
SHA1
881f49d5b1558939ac38dbb547b69af412794f18
SHA256
d833e358525b4a39c314f07759dae7013d69910a15cff1a1d355b11240d66110
SHA512
a28909a01fcec65c7052d1b1c4cde7e673526e53e92c5cc729d95b3c40909399c8a2e17071a311cfa188ac4ca2fb6003d37d5955b61d0e2dd3d356530c012d11
SSDEEP
3072:EsOOF3+yKtbG1YOyQolooT0m8pMSRIh/oeNTBftgFLnOinHDEIwne506Hn/4:EuFurxMYZlTepmjNTBlgFn7nHSne5f4
resource | yara_rule |
---|---|
sample | family_gh0strat |
Checks for missing Authenticode signature.
resource |
---|
04cf06a1309a49a83ab599cf09cee719_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetClassInfoForCurrentUser
GetDefaultPartitionForCurrentUser
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ