BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
Static task
static1
Behavioral task
behavioral1
Sample
a73e25da9ec24b8468516d1b1b1b47a9_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a73e25da9ec24b8468516d1b1b1b47a9_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a73e25da9ec24b8468516d1b1b1b47a9_JaffaCakes118
Size
171KB
MD5
a73e25da9ec24b8468516d1b1b1b47a9
SHA1
82c8c94eb57e9cd06c9b2d4b09ddc14faa6f467e
SHA256
24b72900deacb511e4c254ae57e6bfef5be5924a32ea33c4d10be04a5cfdde55
SHA512
323de2aa0ea6b2a3fc490ac394eb507c29c164527277d8dafbafe2ce435be77cfad525452870c4577f43e9dde6b21d693375ce625580fba353f06d1560f80ac3
SSDEEP
3072:MfXWnbZVPvEG77Boj3J9Sji0HL0K4QzMje4pbF04IPlYGE0Lb3BXVZuE9r:eXWzPvfm0QPQzMFhFYPCGF3l
Checks for missing Authenticode signature.
resource |
---|
a73e25da9ec24b8468516d1b1b1b47a9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
NtClose
BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ