BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
Static task
static1
Behavioral task
behavioral1
Sample
10e95ff7a5bae0f19c388974096a3d4d_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
10e95ff7a5bae0f19c388974096a3d4d_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
10e95ff7a5bae0f19c388974096a3d4d_JaffaCakes118
Size
24KB
MD5
10e95ff7a5bae0f19c388974096a3d4d
SHA1
568a5201219fba0675971fc9434bbcf5c43468c6
SHA256
c4bceef9119bb565d5e6e51be38d224cf4acc8811294c447f1261a35adaead7b
SHA512
1b491020e7e687e90f41e9b276890dcc92d785efd577fc63c8050d437ec6f27450ffb00603d89406d297640e89c1112349cae4c7a9e5b8b20bea20bb02b10e96
SSDEEP
384:hJuzbEYBLYvNeSBLvaBqjsx0H4vKtDu43rpt1ww3vKXa2xAgPLRn:3uzoAYgShvLj0oxu43rpEBq2xACn
Checks for missing Authenticode signature.
resource |
---|
10e95ff7a5bae0f19c388974096a3d4d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
NtClose
BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE