BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
Static task
static1
Behavioral task
behavioral1
Sample
8b31488855559831a7e462ed269424f4_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8b31488855559831a7e462ed269424f4_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
8b31488855559831a7e462ed269424f4_JaffaCakes118
Size
24KB
MD5
8b31488855559831a7e462ed269424f4
SHA1
0d34fd5e27fa306f155dfc843e37bb283206c0b7
SHA256
9603c8ebd6c5f11fef35b33559ed30451fd2c9f87d59df73c08346c1fa44adf9
SHA512
1444f23329b4e64deab558815307511f74cb20abaa8ed222e38ad82369f5568d64ebd7731bf13e1b61455032ef22f371f842a437aa3dbf8a6e89a13309e32b0e
SSDEEP
384:SKeWOoZtD61Mt61uNHo5XueHAAraSMkYR1EEgVBSjewa9xIRSPMz+KSoPn:SaD61MtYuNQ1HAMaOBtVBpwa9xAz+xYn
Checks for missing Authenticode signature.
resource |
---|
8b31488855559831a7e462ed269424f4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
NtClose
BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE