I_BrowserServerEnumForXactsrv
ServiceMain
SvchostPushServiceGlobals
Static task
static1
Behavioral task
behavioral1
Sample
0f70bb531c776e1a5ae307ada970175c_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0f70bb531c776e1a5ae307ada970175c_JaffaCakes118.dll
Resource
win10v2004-20240419-en
Target
0f70bb531c776e1a5ae307ada970175c_JaffaCakes118
Size
39KB
MD5
0f70bb531c776e1a5ae307ada970175c
SHA1
f15638388afa87ab2ef916f2387dfb574231320d
SHA256
4b1e8f45d01d3ed621585670c30d9799cb76a1b493d3baad8416b72b84b3f626
SHA512
7a1f0e34a3843511895eb913ec06351642ba2a1fe280e4f505a721099a1da236d3432a48bfa7dcd25a449c89a6bb00a47d31e3084208bb3d2695a36914924a46
SSDEEP
768:rsEaKRVsFRPcbw5CWlus+ofPCfKGsd3XFZzHfJkGu9OgpFZGZbBB7DNP:GKReFRP+yul2Y61ZzHfJkGiFS9P
Checks for missing Authenticode signature.
resource |
---|
0f70bb531c776e1a5ae307ada970175c_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
free
NtClose
Netbios
NdrServerCall2
LsaClose
CoInitialize
SysFreeString
I_BrowserServerEnumForXactsrv
ServiceMain
SvchostPushServiceGlobals
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE