BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
Static task
static1
Behavioral task
behavioral1
Sample
0ea40983e064c710c529118d5cdd443c_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0ea40983e064c710c529118d5cdd443c_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
0ea40983e064c710c529118d5cdd443c_JaffaCakes118
Size
169KB
MD5
0ea40983e064c710c529118d5cdd443c
SHA1
1433f9e3db0a61066d1e406accb068cd760ded82
SHA256
588280776f153221d6e5e040ebcbc156b6b466d4b5621ec45f77609fe2f2545a
SHA512
3b8e47eafdd76e32e38f00cc78212cffe5fc1901db429add7e1da991996721baed2a2cf62b34e94a42108515b71d8e54c8803f106e20f1aa3745096a9a74814c
SSDEEP
3072:e6YuYpMMg/xjcRLFY/tOhlpCdYjO9P8HOlT7nuU8WQzhk:9Y5yyRlPjO9P8HOh7nun5
Checks for missing Authenticode signature.
resource |
---|
0ea40983e064c710c529118d5cdd443c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
NtClose
BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ