BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
Static task
static1
Behavioral task
behavioral1
Sample
41cbb7830e525dd2076680fe2df32857_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
41cbb7830e525dd2076680fe2df32857_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
41cbb7830e525dd2076680fe2df32857_JaffaCakes118
Size
24KB
MD5
41cbb7830e525dd2076680fe2df32857
SHA1
76e890705a330f9574691d1e9073e26152c95276
SHA256
e1f16e83983b3a0d7b6f466899698c6d8503e1369eba03b3eed00ce95bf86cc6
SHA512
fd68a4c06738c49fe440bac47f64e81ac8de68fb8a2e55766bbf125699055bb1d449f762f80d99e7c1ce7694405e59a2fdccaf0ddd12082c66fb8afbd1720514
SSDEEP
384:uyl4I6ptSXD5nuMVUHWszm5SeaqSNNLBtXRN3xtPayCqIPrN8bvbPn:nl4I6n05nviHVm5mq+pXT3xYqouHPn
Checks for missing Authenticode signature.
resource |
---|
41cbb7830e525dd2076680fe2df32857_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
NtClose
BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE