BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
Static task
static1
Behavioral task
behavioral1
Sample
27b20d487291647ae4c1568a05e2ea0a_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
27b20d487291647ae4c1568a05e2ea0a_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
27b20d487291647ae4c1568a05e2ea0a_JaffaCakes118
Size
24KB
MD5
27b20d487291647ae4c1568a05e2ea0a
SHA1
dc9c9814bc457862a732bca69ddaa938b5b7c1e1
SHA256
a98f6c8d8ee705df3b793406ceb657b664e4b0568cf836f1bb547b2b4ca23fd8
SHA512
6514004fa4446cc5ea34a648522f260d0627671c7ec23f45a7f2c7067a26912812014689f5915022d5bda57f0f678a85bb807d0a90370e8163194d6d84eac094
SSDEEP
384:FRNinfmknVG43frUctO7R4PPs2YFcvB1YKRPUK:FREnbVG8rWcPs2YFcZaKBf
Checks for missing Authenticode signature.
resource |
---|
27b20d487291647ae4c1568a05e2ea0a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
NtClose
BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE