BITSAlloc
BITSFree
BITSServiceMain
BytesRemainingInCurrentRange
CNestedImpersonation
CalculateBytesTotal
DllRegisterServer
DllUnregisterServer
EmptyString
Find
FindInterfaceIndex
GetSubRanges
HostFromProxyDescription
MyLive
PROXY_SETTINGS_CONTAINER
Behavioral task
behavioral1
Sample
0ac08fdb231d578519a9f80cc39a9853_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0ac08fdb231d578519a9f80cc39a9853_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
0ac08fdb231d578519a9f80cc39a9853_JaffaCakes118
Size
142KB
MD5
0ac08fdb231d578519a9f80cc39a9853
SHA1
9b1fbbc393801003272117a2679bb8651d000cb1
SHA256
7cf2ff84ca8cfa55417589639352ec21d34680de3a1fa806f0f7b7a8448ff92e
SHA512
88aba85e2a0ac605a58097b2a718d818920962cc55aeee07a9e60404fdb780a9becaf90481f22ea5a6738fff84e974ba86e3e93c441ad4f0ed1d82c12bd68441
SSDEEP
3072:YjA6nNgPm4eaSbL3efI2OMO/046QXMmAI3ZpTx:YjAQNOOb7GIoO/04HMK1
resource | yara_rule |
---|---|
sample | family_gh0strat |
Checks for missing Authenticode signature.
resource |
---|
0ac08fdb231d578519a9f80cc39a9853_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
BITSAlloc
BITSFree
BITSServiceMain
BytesRemainingInCurrentRange
CNestedImpersonation
CalculateBytesTotal
DllRegisterServer
DllUnregisterServer
EmptyString
Find
FindInterfaceIndex
GetSubRanges
HostFromProxyDescription
MyLive
PROXY_SETTINGS_CONTAINER
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ