ServiceMain
aaaa
bbbb
Behavioral task
behavioral1
Sample
JaffaCakes118_3c34f9268d9a5273ea57e0be475fc0d2.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_3c34f9268d9a5273ea57e0be475fc0d2.dll
Resource
win10v2004-20250217-en
Target
JaffaCakes118_3c34f9268d9a5273ea57e0be475fc0d2
Size
95KB
MD5
3c34f9268d9a5273ea57e0be475fc0d2
SHA1
0bf6f6ec4ee5d34d2b4f66c5b17b82a015eb0f89
SHA256
79d8ba7dba1f454bbe62987f7860e0af66af5554329a090712dbc38682818420
SHA512
b1dd54c6c97716c054400125a0403f2e6cc4fddc1ae36edbdc066be757637be738fa10f70cfdaafd4151d83b961db0e118e7c1f57a0317083adb984f6f7a2fcf
SSDEEP
1536:CwYB2KGCTNdOKX0rQ35wOX51cjZIXcSyqf9KcZkwf5PBeuZNRN:CwbCJMKLwOX51c1IXpys9Kcpf5PBeuZt
resource | yara_rule |
---|---|
sample | family_gh0strat |
Checks for missing Authenticode signature.
resource |
---|
JaffaCakes118_3c34f9268d9a5273ea57e0be475fc0d2 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ServiceMain
aaaa
bbbb
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ