EndWork
Runing
ServiceMain
Working
Behavioral task
behavioral1
Sample
JaffaCakes118_5a9bcd27984dc1708873a03cb1ada025.dll
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
JaffaCakes118_5a9bcd27984dc1708873a03cb1ada025.dll
Resource
win10v2004-20250217-en
Target
JaffaCakes118_5a9bcd27984dc1708873a03cb1ada025
Size
100KB
MD5
5a9bcd27984dc1708873a03cb1ada025
SHA1
c2dcbe754415dd91174794e629055b21adec0c70
SHA256
0dd7ccb2de838cc76483fc331a08998a32495dd541412522914c781defed0143
SHA512
db83222827a5c26ff86a88a93727fcd8e77eff107588c64893790d8bafa41733f6b9dd41e6efc1381b2bf083fc4c008eb38ae09be1fddb1af92103540965ee9d
SSDEEP
3072:6wxSQpKa3VGVnpUlCz764/9xpEPpqbZuwcLGL:5JVGpxx9bwoZuwcLGL
resource | yara_rule |
---|---|
sample | family_gh0strat |
Checks for missing Authenticode signature.
resource |
---|
JaffaCakes118_5a9bcd27984dc1708873a03cb1ada025 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
EndWork
Runing
ServiceMain
Working
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ