BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
Static task
static1
Behavioral task
behavioral1
Sample
a12c5dbddc4afe82e5b0a9fea718bb5a_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a12c5dbddc4afe82e5b0a9fea718bb5a_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a12c5dbddc4afe82e5b0a9fea718bb5a_JaffaCakes118
Size
165KB
MD5
a12c5dbddc4afe82e5b0a9fea718bb5a
SHA1
6ee742e1c5977e5963295e359dd615c214419c18
SHA256
9e0730e955758bf67d9e06490baf8ae63277bf0594e5671b056c68ace7275731
SHA512
5d415d37056cf3d14dc7ceabfc2a3285ca914c820df93d8c945a350719bd2b0aa794274940af214061d6d9459a7a07a7998129a3417c4312fcd9ffbe23b77178
SSDEEP
3072:IvSQziz06KBd/EQIKsNgBFelSg03l4cMcxikLQps0semjypHBjh8nRFLQeuZr:Si8d/EHXoi03lFMULrezpsu
Checks for missing Authenticode signature.
resource |
---|
a12c5dbddc4afe82e5b0a9fea718bb5a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
NtClose
BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ