BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
Static task
static1
Behavioral task
behavioral1
Sample
c0a161adf3da16a18810371a3d575332_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c0a161adf3da16a18810371a3d575332_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
c0a161adf3da16a18810371a3d575332_JaffaCakes118
Size
28KB
MD5
c0a161adf3da16a18810371a3d575332
SHA1
a2a56b0a6d062e78ae562c708f8b7fab7a49de09
SHA256
e548f9a7880fb600c81398e6d630fabf9ac06ae734cac04fb62892f9b1ff8955
SHA512
931e12b4059d398abbe591d346d1b3bcfcab6f77f30e2a7953bdc4ed3b249797cd9096bf1f9b9c07c2d6deae0755438a54c0a933886346283e922a4d7e501155
SSDEEP
384:yl15Y7V1NluSHWwVem86IZEtYxA1FJ06Lu5GDD1siCei0Pb:yl7Y51NrHXIVatY4FJ06Lu5GeiC/0Pb
Checks for missing Authenticode signature.
resource |
---|
c0a161adf3da16a18810371a3d575332_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
NtClose
BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE