BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
Static task
static1
Behavioral task
behavioral1
Sample
eb65e6f02f96ee9a9ad045c4db7ff113_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eb65e6f02f96ee9a9ad045c4db7ff113_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
eb65e6f02f96ee9a9ad045c4db7ff113_JaffaCakes118
Size
21KB
MD5
eb65e6f02f96ee9a9ad045c4db7ff113
SHA1
b6db250dd04b17aef4c4000da702516f60c84e5d
SHA256
c44a4d2b0c7c518f38e24cd3e2f19f4d418faef77b6382ad577c410c6f145909
SHA512
16761f4a5f42ff246a84d355a1276c56e9f5a3479dc79cc7458accfd971b088ed3f7f15946cf6b94c45a0624ab11be5289d636c73d5b42ff784018f8d026526c
SSDEEP
384:RgkTellCU0Dng8u8Ky+OUlaU2tSsrxJIktyL3khicZhI5OxmBqJ7IPS3bOQLY:GZzCU088CjdxsrxaFcUiJ7IP4bOQLY
Checks for missing Authenticode signature.
resource |
---|
eb65e6f02f96ee9a9ad045c4db7ff113_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
NtClose
BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE