BaseSetProcessCreateNotify
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
Static task
static1
Behavioral task
behavioral1
Sample
2aa3191ea06b93fcb911efa8d26dfd5e_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2aa3191ea06b93fcb911efa8d26dfd5e_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2aa3191ea06b93fcb911efa8d26dfd5e_JaffaCakes118
Size
24KB
MD5
2aa3191ea06b93fcb911efa8d26dfd5e
SHA1
7f727c64eb90c9242256bcb0dbb492c91213713a
SHA256
495264d680871176d64a363c73250fb6b4b44795ec1017f6c8f8a85191edcadf
SHA512
c8bca62c6f9b3fd6fc6635cd08866c0dff2f490d28c2491812e4fb19dccac8170369945756817dd0d135264cdc3c1f957854221d7acffcdf7240692c2c07deb6
SSDEEP
384:FCgOOmfFDmTJiZHE/IjsmK0xT3CrhhY0FJCSa4IXY/19G:QgOOmV0JiZkEsmLxIuI3
Checks for missing Authenticode signature.
resource |
---|
2aa3191ea06b93fcb911efa8d26dfd5e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
NtClose
BaseSetProcessCreateNotify
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
BaseSetProcessCreateNotify
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE