BaseSetProcessCreateNotify
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
Static task
static1
Behavioral task
behavioral1
Sample
e2131cb2f12fcd92b8476eeb70f23bad_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
e2131cb2f12fcd92b8476eeb70f23bad_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
e2131cb2f12fcd92b8476eeb70f23bad_JaffaCakes118
Size
139KB
MD5
e2131cb2f12fcd92b8476eeb70f23bad
SHA1
943d9bff4cf2cb5f64885969ac0964286ff30117
SHA256
395de992f8969788e8f63351fbe07698768efa3b433ad364d7630709698c2164
SHA512
c5ac9f19f1248e30538c8375162507bd29d70643d159d38e61774186f2793df1cc582bfb9a815416ed3ebac29b259149ea8bade0d5e98bbbfc4370e62f655d54
SSDEEP
3072:UcnQDZdjPyN4cluLFkFk1tSAj3FKtQUOExIpzqP/Hm22GBo2:0P24clCFkF2SApKQsszqPvYq
Checks for missing Authenticode signature.
resource |
---|
e2131cb2f12fcd92b8476eeb70f23bad_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
NtClose
BaseSetProcessCreateNotify
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
BaseSetProcessCreateNotify
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ