DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetClassInfoForCurrentUser
GetDefaultPartitionForCurrentUser
Behavioral task
behavioral1
Sample
369d95ccb6d6cf99be3168c435fdf5ad_JaffaCakes118.dll
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
369d95ccb6d6cf99be3168c435fdf5ad_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
369d95ccb6d6cf99be3168c435fdf5ad_JaffaCakes118
Size
444KB
MD5
369d95ccb6d6cf99be3168c435fdf5ad
SHA1
f5645f0426050cc297c9e641df41761fc6702bf4
SHA256
b09ff682128033b1cd611e4eca95f91d427b41d9234554df2cb7ff4b883fb525
SHA512
7084afc09c0a7115d563a7132d98a0a620be1d6eac1f42b856d8e401033be2cd9d6510170acd5fe0bf46ed76ea5c5dd58a6acd91845007d5c4743a5538098d7f
SSDEEP
3072:GsOOF3+yKtbG1YOyQolooT0m8pMSRIh/oeNTBftgFLnOknHDXNwnUHiZM:GuFurxMYZlTepmjNTBlgFnxnHSoiZM
resource | yara_rule |
---|---|
sample | family_gh0strat |
Checks for missing Authenticode signature.
resource |
---|
369d95ccb6d6cf99be3168c435fdf5ad_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetClassInfoForCurrentUser
GetDefaultPartitionForCurrentUser
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ