BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
Static task
static1
Behavioral task
behavioral1
Sample
475e1acadf9c5792f35d4e4cbd127611_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
475e1acadf9c5792f35d4e4cbd127611_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
475e1acadf9c5792f35d4e4cbd127611_JaffaCakes118
Size
24KB
MD5
475e1acadf9c5792f35d4e4cbd127611
SHA1
bdd0eecc310e4e2776628840a9e24914e73f0865
SHA256
d5e68ff0aafdead4472f66d55f1395e1a69acc75bbeeb99014383ded43e812d0
SHA512
f17cb0217f128905dee8467d82ea466ec36e33347e79aa2c35d5523d5b94008c14ad39086c5c3239fe589d2ad51e0bc8023e01b5dae5a8f0069670b12cf0738c
SSDEEP
384:wgQXq8XVOB+vcZ8BjnZY1eBvyLfaHCtFOh3u41f9AquTxJ5hZxgtX7k+U3sX:wgQHXqZ8BDZm2itVI9cJJsrprX
Checks for missing Authenticode signature.
resource |
---|
475e1acadf9c5792f35d4e4cbd127611_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
NtClose
BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE