BaseSetProcessCreateNotify
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
Static task
static1
Behavioral task
behavioral1
Sample
f4fca09a0cfeddcd9935bc291e1b9cf5_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f4fca09a0cfeddcd9935bc291e1b9cf5_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
f4fca09a0cfeddcd9935bc291e1b9cf5_JaffaCakes118
Size
24KB
MD5
f4fca09a0cfeddcd9935bc291e1b9cf5
SHA1
4e8b754dcedf196e16e7c38ac6096825461d3a96
SHA256
880ab2a0024919fa7eb04e7109acaed32834ab5d8f550eed2a5f19600db89190
SHA512
e051d90ebea372b730668475b3821f7931b8234641ef1c1d6e39b7309ed44a1ec3bd499854e8b89f5c39f498fefecd156a1c51e91af9423a2f351172f2c1b6ce
SSDEEP
384:72cuDkqn5eIfBR+mTupw+/YThPZmNpKaH5hCkgWbIki1QZjBVdDbcdV:7uDDj/+2SYTPmWafCPWHWmjd
Checks for missing Authenticode signature.
resource |
---|
f4fca09a0cfeddcd9935bc291e1b9cf5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
NtClose
BaseSetProcessCreateNotify
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
BaseSetProcessCreateNotify
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE