BaseSetProcessCreateNotify
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
Static task
static1
Behavioral task
behavioral1
Sample
126251619d97fd5864bc0a73a7f7ebee_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
126251619d97fd5864bc0a73a7f7ebee_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
126251619d97fd5864bc0a73a7f7ebee_JaffaCakes118
Size
24KB
MD5
126251619d97fd5864bc0a73a7f7ebee
SHA1
baf7b858efb1572739ebe4a3cbf7723629e2c2b1
SHA256
e9ec9783a6ffcb2a9632f8b0bcce717d4a3c08c0b4ed4e086c8588bcaf391372
SHA512
c4ada623be4cec19f5e050a42eddd9e6fdbaf1b52396a1bac448239232960c852e55f0154fb109597ae8c166584a6c1440287c1c19d6a1f1dcf8339dbadff850
SSDEEP
384:GGJbReEGxblyrAp3vqHRWAApr4RcIonvDI0AtmfISeBq3lIsqgOQFY775EN:GMbIddp3yItrecI84eIk3ciG3W
Checks for missing Authenticode signature.
resource |
---|
126251619d97fd5864bc0a73a7f7ebee_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
NtClose
BaseSetProcessCreateNotify
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
BaseSetProcessCreateNotify
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ