BaseSetProcessCreateNotify
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
Static task
static1
Behavioral task
behavioral1
Sample
fdde2cd829aa521cb979c717046acbd7_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fdde2cd829aa521cb979c717046acbd7_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
fdde2cd829aa521cb979c717046acbd7_JaffaCakes118
Size
24KB
MD5
fdde2cd829aa521cb979c717046acbd7
SHA1
4c1f2de6919bbe30f665dc25834783779c6c5d99
SHA256
71041c03ad56523f3c0561e739a8f11d39001ddfbbd908eaf77154ec33287264
SHA512
c22618c7bd1397672fd88e4f6195008a1ae03bcce8df287a36b18a1a8ab88a06a7ff747085452978dc191e0c295e10b666cee64921dde603ffa912d14c74902b
SSDEEP
384:JCqkXGIjTgvXCuJhrDodTFaUS7ivfmS/Qf52MnMF0fB9KUvBn:JVI/OyehrDodTFO2Xh/Qf16UvBn
Checks for missing Authenticode signature.
resource |
---|
fdde2cd829aa521cb979c717046acbd7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
NtClose
BaseSetProcessCreateNotify
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
BaseSetProcessCreateNotify
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE