InstallNTDSProvider
NSPStartup
RemoveNTDSProvider
Static task
static1
Behavioral task
behavioral1
Sample
3f931769948a187173871f2047bfb358_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3f931769948a187173871f2047bfb358_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3f931769948a187173871f2047bfb358_JaffaCakes118
Size
17KB
MD5
3f931769948a187173871f2047bfb358
SHA1
1262963b2f9839a6d471ca602304310a54215871
SHA256
b608260d8c934f68acebeb56a763c84804829be354c461c3a43bc17b47cd06da
SHA512
d86f37c395e3f9ec21094252e3bd1ab9d7de2815188364c8ed665eeb10011f49d28ae890ad94595e2781950644adec0aac2b351d1ad6565eb97cd30e6c513edf
SSDEEP
192:kEjvD+/AzVszBmr9MTZJTiLCu1kaO21xDLf3+TYqpowUrB2mPdBHWWJrpD9GB:kG+oRcBmmiW+YmnSYprBZdd9GB
Checks for missing Authenticode signature.
resource |
---|
3f931769948a187173871f2047bfb358_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InstallNTDSProvider
NSPStartup
RemoveNTDSProvider
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ