_boot_Win32__NetAdmin
boot_Win32__NetAdmin
Static task
static1
Behavioral task
behavioral1
Sample
c806243a473619e9426743ae91a5f4d4_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c806243a473619e9426743ae91a5f4d4_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
c806243a473619e9426743ae91a5f4d4_JaffaCakes118
Size
13KB
MD5
c806243a473619e9426743ae91a5f4d4
SHA1
547be6510f1db55bf76677a419b8f70d163eb2fe
SHA256
427db2f6a11ec8c07fc809bfef9503537f57d6afbac0902475d55d58eaf510db
SHA512
4ec3e2bd8a0251c7786ed0b3a6c0327751593e6c38371864e7164412cae8eade9bf137cc5c5c251a27583d1198d2ddce4675e36e96fe1ad85392adab11892bdf
SSDEEP
384:PY4yymYJOeXGZfFKMSfblOnw2d3T87vvxlL:PYzymYJpX8f1c5Onw2d3T87D
Checks for missing Authenticode signature.
resource |
---|
c806243a473619e9426743ae91a5f4d4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
Perl_newXS
FreeSid
NetUserAdd
free
_boot_Win32__NetAdmin
boot_Win32__NetAdmin
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE