BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
Static task
static1
Behavioral task
behavioral1
Sample
a19504a18a89914adcf96d4227b435ec_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a19504a18a89914adcf96d4227b435ec_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a19504a18a89914adcf96d4227b435ec_JaffaCakes118
Size
21KB
MD5
a19504a18a89914adcf96d4227b435ec
SHA1
65ce0f6e4143cda054266c8599a65d754b959676
SHA256
a12a770c5738b7e7d1dede8edc8f5eeedd0b33639495d223d7fd3c59a6743d48
SHA512
90171de8aef72264988816714b0a8a4996c165efe87626276390c35c1abc053f6dc76a36021340867c5b005028c77cbb6fe1bc8ed2b181dfb1d62bbf612fe5db
SSDEEP
384:S2H096tjb6PktZjgfQ6M2ChQAktrp9RUPD5jhK3hgtrA3oCMb75C1ujlcX+xLRNl:S2IPktZjgfQbSldmjhqhgZ+MbFCs31RH
Checks for missing Authenticode signature.
resource |
---|
a19504a18a89914adcf96d4227b435ec_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
NtClose
BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE