BaseSetProcessCreateNotify
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
Static task
static1
Behavioral task
behavioral1
Sample
1af43f8e4790429415025ecc2caaf7fa_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1af43f8e4790429415025ecc2caaf7fa_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
1af43f8e4790429415025ecc2caaf7fa_JaffaCakes118
Size
21KB
MD5
1af43f8e4790429415025ecc2caaf7fa
SHA1
d8e13afb633bc56a0ebdddc0333d2d4d4079ac89
SHA256
77c4458a9dc93ddaf68c6094784a7ec5ca6c2ae398d5a520708549ce5812ae5d
SHA512
449e54129bc8c01a7dacf01ceb0081a874948af9394afb3a8397814b92684a18c9a160f56b548f84dee31a213379314d0e227a2665daff7dc4dbbc8111024b97
SSDEEP
384:Cayde8cV0L8iPllmdNdnYe0iv81cqxcnEcDM71zltpi1gXY9XHwZmn96:byd+1qlmdN/0ikbcJollY3he2U
Checks for missing Authenticode signature.
resource |
---|
1af43f8e4790429415025ecc2caaf7fa_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
NtClose
BaseSetProcessCreateNotify
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
BaseSetProcessCreateNotify
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE