BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
Static task
static1
Behavioral task
behavioral1
Sample
2c15470091513f4b3243b59b58e29c15_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2c15470091513f4b3243b59b58e29c15_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2c15470091513f4b3243b59b58e29c15_JaffaCakes118
Size
24KB
MD5
2c15470091513f4b3243b59b58e29c15
SHA1
223723c8868f21d30533610bbc7ef1ff0153ed5d
SHA256
950f4d68a3183c2bb2a3ab4cd25abde807a7695fce858653cee63209e3a1ed56
SHA512
60a20289deb66cfaa8bbd754af8e3b63a81c1285ecb9823b99ba2ffdb750e1c0537ff391988cd631a1055324375ad9e1788b1c82fbdf2040e25e62e145dd577b
SSDEEP
384:x/lDyCihEKsBunPg09FOvxFuJI0C5wEtbS1FWbT3bZgB4+SUO7:x/9QhEK4uIQ0xFuKRwEtbSibLbz+Sz7
Checks for missing Authenticode signature.
resource |
---|
2c15470091513f4b3243b59b58e29c15_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
NtClose
BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE