BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
Static task
static1
Behavioral task
behavioral1
Sample
bf0b46a493202fb8e6b1e6bd4f61915a_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bf0b46a493202fb8e6b1e6bd4f61915a_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
bf0b46a493202fb8e6b1e6bd4f61915a_JaffaCakes118
Size
24KB
MD5
bf0b46a493202fb8e6b1e6bd4f61915a
SHA1
c99313342b5dfb0efff7b61d227e8f997be22c6a
SHA256
06543eee83e6e66852a3e18a20e77a50e3b786f8dbfe89e619b0910d7e742ffd
SHA512
fa153542a8ae5191eac76667f4406c62b80030d10a133e3d794723ebe2316f47caa27c245621d822212b391c31a760dced624dcda171a71cc524ef95bb7a104d
SSDEEP
384:LRNinfmknVG43frUctO7R4PPs2YFcvB1YKR0UK:LREnbVG8rWcPs2YFcZaKSf
Checks for missing Authenticode signature.
resource |
---|
bf0b46a493202fb8e6b1e6bd4f61915a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
NtClose
BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE