SensNotifyNetconEvent
SensNotifyRasEvent
SensNotifyWinlogonEvent
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
95bc5b5a7cf14c6d28a4ff7ca20a88aa_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
95bc5b5a7cf14c6d28a4ff7ca20a88aa_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
95bc5b5a7cf14c6d28a4ff7ca20a88aa_JaffaCakes118
Size
23KB
MD5
95bc5b5a7cf14c6d28a4ff7ca20a88aa
SHA1
1db56cdae4303c7038cdc16ee8b9a51e12bb3910
SHA256
2224410f61d3a4f464c982bd7421bf37a2c89ecd4be4d3059850f8df9b7f990d
SHA512
c80b36930fbdaa5dc8def42119b21266a60046c550193feea040d2c9741ef1dc896bd0d0a95a5913924be1a1d371676e4854c6f76b897c3acba9147bc7b59266
SSDEEP
384:cTvdXCb8TRMJcwzlRIjTFYw5mXeg21G2HSpgy7vvxlLyAwqyOaeSKWHMW:UCb8FqzYTFYwSG1G2HGgy7Dyl
Checks for missing Authenticode signature.
resource |
---|
95bc5b5a7cf14c6d28a4ff7ca20a88aa_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
wcscat
NdrServerCall2
StringFromIID
wsprintfW
FreeSid
SensNotifyNetconEvent
SensNotifyRasEvent
SensNotifyWinlogonEvent
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE