DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetClassInfoForCurrentUser
GetDefaultPartitionForCurrentUser
Behavioral task
behavioral1
Sample
JaffaCakes118_439dcf337368967bad207f5fbe19ba78.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_439dcf337368967bad207f5fbe19ba78.dll
Resource
win10v2004-20250217-en
Target
JaffaCakes118_439dcf337368967bad207f5fbe19ba78
Size
1.6MB
MD5
439dcf337368967bad207f5fbe19ba78
SHA1
b10169b737a3f871ffc565d797a2ac2886f53521
SHA256
6f7efc65c75a33baa01aa723c32ea0a9a89397ba740fccce81f76cf429ae9efc
SHA512
2f66d95d05cf417e3a7c2e012bbd129980230862905caff05d5757ec26c4cadb877275a9606c5ae570c641de632ae0e8a82110a45536a35fdbe43e0cfc92e1aa
SSDEEP
49152:2TMqV4MqVZTMqV1TMqVkTMqVpTMqV8TMqVHTMqVJTMQ:UVwVxVtVGVBVOVDVh
resource | yara_rule |
---|---|
sample | family_gh0strat |
Checks for missing Authenticode signature.
resource |
---|
JaffaCakes118_439dcf337368967bad207f5fbe19ba78 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetClassInfoForCurrentUser
GetDefaultPartitionForCurrentUser
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ