BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
Static task
static1
Behavioral task
behavioral1
Sample
b7f46bd7c2dfa197c036f7ab992f328e_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b7f46bd7c2dfa197c036f7ab992f328e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b7f46bd7c2dfa197c036f7ab992f328e_JaffaCakes118
Size
166KB
MD5
b7f46bd7c2dfa197c036f7ab992f328e
SHA1
fcc8e584cae74201d292b97af596e0cfec0e6971
SHA256
4fc6cf84c6ee539a7aee23c0256791bce0f83c1378ac0ae6583bc48540e5e473
SHA512
37fd1d711ab35082384582b702f21bbef949f54dcfd3fa80afa439e51681ff21a2ea1c8c53bd34f8b9d109855ed3c71a4f693f2c3a3bde4db871e98897779724
SSDEEP
3072:30f/ngJa3Gy2WEmawfrN/HcCWJ00kIq9nSey2jaLTgXzacMV4qRN/r:Ef/ngJOGy2WB/8CGYIqdS8Xz
Checks for missing Authenticode signature.
resource |
---|
b7f46bd7c2dfa197c036f7ab992f328e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
NtClose
BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ