BaseSetProcessCreateNotify
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
Static task
static1
Behavioral task
behavioral1
Sample
a110bb2aee6576381765c5a8ac9457da_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a110bb2aee6576381765c5a8ac9457da_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a110bb2aee6576381765c5a8ac9457da_JaffaCakes118
Size
21KB
MD5
a110bb2aee6576381765c5a8ac9457da
SHA1
afb08c3c90c1871dbda15a082c6c8bf5af2b8259
SHA256
71bd234da97b7f1346aecbaf06325fba933231f18cc0afeea4f1f1df0f38f8be
SHA512
9e2b40a5bf2a071412349b0982df05256ddecc49f359dc77d7d91a9f8aa66bc13346c7129ce858390a611f178aa6af6cf166905c3268325c7920daf3a90860e1
SSDEEP
384:7h4VO4JDNeGLlx2O/lICZc2u0qyBYQFYSxiT3v2E5g/9QU:dQ1uO/lIutSQ28iT3OE5iqU
Checks for missing Authenticode signature.
resource |
---|
a110bb2aee6576381765c5a8ac9457da_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
NtClose
BaseSetProcessCreateNotify
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
BaseSetProcessCreateNotify
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE