BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
Static task
static1
Behavioral task
behavioral1
Sample
1658f15f9bc2256d5189f93adef268ea_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1658f15f9bc2256d5189f93adef268ea_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
1658f15f9bc2256d5189f93adef268ea_JaffaCakes118
Size
28KB
MD5
1658f15f9bc2256d5189f93adef268ea
SHA1
1ab3d7932262d0943971e09117c50db202cb204e
SHA256
8123e91cb4e26f202fb56578a9891d704605f2cd1e9f8e2ec142034cc2d37924
SHA512
ef181d8d3bf2c9aa12f0b34808d6acb8b7d320476f3c8f1692248f0fb2b64853e2c1066bac61871cd63e301d245ae0cc8344defdd9c79378462054df80f35699
SSDEEP
384:+q0TZ0qkSZKZ+gpaa0t++GU2m3cRM8dp0ibzbxWjwTdSU+W3Rmbw8RD1M:3qAZvn0k+9bsDpTDA0TiW3KRM
Checks for missing Authenticode signature.
resource |
---|
1658f15f9bc2256d5189f93adef268ea_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
NtClose
BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE