I_BrowserServerEnumForXactsrv
ServiceMain
SvchostPushServiceGlobals
Static task
static1
Behavioral task
behavioral1
Sample
7331e0cb960e78075e5832695f5dd7d4_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
7331e0cb960e78075e5832695f5dd7d4_JaffaCakes118.dll
Resource
win10v2004-20240426-en
Target
7331e0cb960e78075e5832695f5dd7d4_JaffaCakes118
Size
38KB
MD5
7331e0cb960e78075e5832695f5dd7d4
SHA1
ba293cfb3c50bf5fdd5f6da55231a52cbf34c6dd
SHA256
e4eed186119ef911f00f37cf2943b649d272afb25caa72929d328613c0910b28
SHA512
830234ca860f116544c9567a3cc66e4a451f682a406456d13e79e899d903ee8508e00d97a6549c6db4ba45350af17c9986665323255a4db130b6cedd46fcc8b3
SSDEEP
768:xJVeUmZPRA6URur0eJJWyn1JdCJMyhn6dpTMP7DtJ:x5mZpA6M7eeCJdCj6vTQJ
Checks for missing Authenticode signature.
resource |
---|
7331e0cb960e78075e5832695f5dd7d4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
LsaClose
qsort
Netbios
NtClose
NdrServerCall2
I_BrowserServerEnumForXactsrv
ServiceMain
SvchostPushServiceGlobals
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE