ServiceMain
BBLMHK
ZWJ
Windows 7 will be removed from tria.ge on 2025-03-31
Behavioral task
behavioral1
Sample
JaffaCakes118_37407248e6b61e05798a4a40900ed53e.dll
Resource
win7-20241023-en
Target
JaffaCakes118_37407248e6b61e05798a4a40900ed53e
Size
79KB
MD5
37407248e6b61e05798a4a40900ed53e
SHA1
d1bb1511219c6a8fcaef3291fe578a50b80ce4a1
SHA256
269bb5f68255ca0b23c3a9e163732811aa3040bc11dbe061c7c656ddfd0c8104
SHA512
aa7895c2d3bbab33961e80bc57bce8bffed77fb7cc83ad2f67b2ff33da5040a0795a7036d9428327617b974919dc26ba2411b7e4136a3aabe8232fc73e34e014
SSDEEP
1536:dsPLAeEEBBMmymE9s/+YLSzL6c3ZRfs+czQOZ/ofU:dsUeE+tq95L6kZBs+clZ/ofU
resource | yara_rule |
---|---|
sample | family_gh0strat |
Checks for missing Authenticode signature.
resource |
---|
JaffaCakes118_37407248e6b61e05798a4a40900ed53e |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ServiceMain
BBLMHK
ZWJ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ