BaseSetProcessCreateNotify
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
Static task
static1
Behavioral task
behavioral1
Sample
1566c8396eb24be4ca82e052a5007c65_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
1566c8396eb24be4ca82e052a5007c65_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
1566c8396eb24be4ca82e052a5007c65_JaffaCakes118
Size
20KB
MD5
1566c8396eb24be4ca82e052a5007c65
SHA1
8c144ac91991d85787aded22b181b27dcb01001a
SHA256
ee7ad99a9510a0877b339b85b8581296d79091489ea3815667cbec74ea9ba785
SHA512
f9291f14a6e38c3fedc5b8e256539bcc742e631b7551f921e95e0b3754d016dbbd874cdcd0de8df4e6c085ba4209d945ee2b8c8acce102b72d9a9fdf8a5facbd
SSDEEP
384:14X7zUvAFUMNGSrqkizXOXOmfs3vTayW2pEYWtZ:yrz36MNGSrqkizGOmfs/T5W2C3
Checks for missing Authenticode signature.
resource |
---|
1566c8396eb24be4ca82e052a5007c65_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
NtClose
BaseSetProcessCreateNotify
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
BaseSetProcessCreateNotify
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE