BITSAlloc
BITSFree
BITSServiceMain
BytesRemainingInCurrentRange
CNestedImpersonation
CalculateBytesTotal
DllRegisterServer
DllUnregisterServer
EmptyString
Find
FindInterfaceIndex
GetSubRanges
HostFromProxyDescription
MyLive
PROXY_SETTINGS_CONTAINER
Behavioral task
behavioral1
Sample
1238291fc435f137a4d1bdfd168b8880_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1238291fc435f137a4d1bdfd168b8880_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
1238291fc435f137a4d1bdfd168b8880_JaffaCakes118
Size
116KB
MD5
1238291fc435f137a4d1bdfd168b8880
SHA1
20ba7aebd2ded9916d8c478bac885bb2d3298ca0
SHA256
1a1da5c8486af606c4f76bf3df7152cfd8063668fcb585d664c7acffa3485354
SHA512
63820e1dd645abb8ec9a5eb4e3fd4fdea406afb406897986257591445c652932cc4e264a944e1c3265107e975309cd4fbe0e657ef515b2376de7dfadb4e04c2f
SSDEEP
1536:EjAZXGnnFriOOkqzIEPm4ectSLfL3e/H6n2OMO/dup4OTLX:EjA6nNgPm4eaSbL3efI2OMO/M2c
resource | yara_rule |
---|---|
sample | family_gh0strat |
Checks for missing Authenticode signature.
resource |
---|
1238291fc435f137a4d1bdfd168b8880_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
BITSAlloc
BITSFree
BITSServiceMain
BytesRemainingInCurrentRange
CNestedImpersonation
CalculateBytesTotal
DllRegisterServer
DllUnregisterServer
EmptyString
Find
FindInterfaceIndex
GetSubRanges
HostFromProxyDescription
MyLive
PROXY_SETTINGS_CONTAINER
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ