UPSCancelWait
UPSGetState
UPSInit
UPSStop
Behavioral task
behavioral1
Sample
JaffaCakes118_5084fd0e6e1f0399ab2e9ce6d41c4857.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_5084fd0e6e1f0399ab2e9ce6d41c4857.dll
Resource
win10v2004-20250129-en
Target
JaffaCakes118_5084fd0e6e1f0399ab2e9ce6d41c4857
Size
1024KB
MD5
5084fd0e6e1f0399ab2e9ce6d41c4857
SHA1
0258d33a0e4663fd39dc543873618f7ec64208c8
SHA256
4b157d3d195856d772eda78787d27eb7e7341e2da3a6017d4d6cfbb3f9f3587c
SHA512
72e0b60bff13fa900f44155efb01e5886f05e00ec03f5cacc902e66ac51289c196099774f7ad0dcab7ceaa69592d8378d529d59a9bf539ddcc982462f8a53a7c
SSDEEP
3072:W1Jz2Rhid4rvs845dn55qEuetoj2LTBftvnydu:W1aZD45d3qnDSLTBlvny
resource | yara_rule |
---|---|
sample | family_gh0strat |
Checks for missing Authenticode signature.
resource |
---|
JaffaCakes118_5084fd0e6e1f0399ab2e9ce6d41c4857 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
UPSCancelWait
UPSGetState
UPSInit
UPSStop
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ