BITSAlloc
BITSFree
BITSServiceMain
BytesRemainingInCurrentRange
CNestedImpersonation
CalculateBytesTotal
DllRegisterServer
DllUnregisterServer
EmptyString
Find
FindInterfaceIndex
GetSubRanges
HostFromProxyDescription
MyLive
PROXY_SETTINGS_CONTAINER
Windows 7 will be removed from tria.ge on 2025-03-31
Behavioral task
behavioral1
Sample
JaffaCakes118_52863bfa9c72c14f2d51e2c2ba76c374.dll
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
JaffaCakes118_52863bfa9c72c14f2d51e2c2ba76c374.dll
Resource
win10v2004-20250129-en
Target
JaffaCakes118_52863bfa9c72c14f2d51e2c2ba76c374
Size
122KB
MD5
52863bfa9c72c14f2d51e2c2ba76c374
SHA1
c41f21edfc7767fdf5bc2651cdcb66d944910a18
SHA256
a574c882b51dd50d8dc341a8e352cc0acca6ded44726c6d1ec814dfcef2871c2
SHA512
d47cc138e9e8bc768c0be926a5d83e5e637668e828b762a28bd1c5d774ea6f6c7adbd01277417d8e92c2b3d1cae1eb6c1824eb1860b0d6907c4595724cca4bd7
SSDEEP
1536:+jAZuGYnFriOOkqiIEPm4ectSLfL3e/H6n2OMOVdup4OTLCLzQ:+jAsnNfPm4eaSbL3efI2OMOVM2A
resource | yara_rule |
---|---|
sample | family_gh0strat |
Checks for missing Authenticode signature.
resource |
---|
JaffaCakes118_52863bfa9c72c14f2d51e2c2ba76c374 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
BITSAlloc
BITSFree
BITSServiceMain
BytesRemainingInCurrentRange
CNestedImpersonation
CalculateBytesTotal
DllRegisterServer
DllUnregisterServer
EmptyString
Find
FindInterfaceIndex
GetSubRanges
HostFromProxyDescription
MyLive
PROXY_SETTINGS_CONTAINER
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ