BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
Static task
static1
Behavioral task
behavioral1
Sample
93fb5a15833a994d469858fe7eb9c523_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
93fb5a15833a994d469858fe7eb9c523_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
93fb5a15833a994d469858fe7eb9c523_JaffaCakes118
Size
24KB
MD5
93fb5a15833a994d469858fe7eb9c523
SHA1
65d785dfb30528f5e4de58787679572fdb53b8d9
SHA256
620b299fb8cec1561362749fc8c3bd88453fbd9dc3e6189098678794ff42982f
SHA512
de0f4ac0b94a2148fbdc947ded5ef79fd0a48325454ea3b3378ae7ceb967f8e4c665fe2d3b9c2b690ab7cab5febf5b973b4d6da67ac5cd0127fb079823cd07f5
SSDEEP
384:V2CaU1XQsC9SzzbE6m5f4k9nEDACpZr8QO+l1tYpp1zAWJEw+VTHKVmg:geXQhO4634mpZgQO+RwEqh+NHHg
Checks for missing Authenticode signature.
resource |
---|
93fb5a15833a994d469858fe7eb9c523_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
NtClose
BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE