BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
Static task
static1
Behavioral task
behavioral1
Sample
02cec9fcd968f5b66e37da8a4f79835a_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
02cec9fcd968f5b66e37da8a4f79835a_JaffaCakes118.dll
Resource
win10v2004-20240910-en
Target
02cec9fcd968f5b66e37da8a4f79835a_JaffaCakes118
Size
24KB
MD5
02cec9fcd968f5b66e37da8a4f79835a
SHA1
845a5f3b668d2d45245a7f97fd66c04e5014a15e
SHA256
c03df6c92d80bcacbaadd08358b2f32f300793572c71a737659a0c691d2dd04f
SHA512
bd0944ca2181e709f8823885a5d68170ce5733a6dc7457da912c475c0061ea0b96a829aa7e64983bece98e80b140ddf73a3be728efaf29f54f00167e7ecca1e2
SSDEEP
384:mrWM4vLqPsC4JK2FMpJaGLQAGNHMEqkT77I+arVlsZS5X/NhvsYLwhSLCmn:mKHvLzCZPCEGNHMEqkPLarzsZcFh0Gws
Checks for missing Authenticode signature.
resource |
---|
02cec9fcd968f5b66e37da8a4f79835a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
NtClose
BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE