BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
Static task
static1
Behavioral task
behavioral1
Sample
30ed5150ff35f8373e66ff652c0aa586_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
30ed5150ff35f8373e66ff652c0aa586_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
30ed5150ff35f8373e66ff652c0aa586_JaffaCakes118
Size
24KB
MD5
30ed5150ff35f8373e66ff652c0aa586
SHA1
3b26157d375272bdcbd2958cc7f4fdc84bde4e6d
SHA256
de05b336afecae72084a56b0b6e8cbd2f11f4b3626d45d2179dafa9002ea0e5d
SHA512
6463b9ca20004034e714901a19c573d857fa8b67344343a5542c586deecad01081f44c60ebd44e2275561bcd17da24a684d9976d18320c261d5b4d28e1a00d4d
SSDEEP
384:V2CaU1XQsC9SzzbE6m5f4k9nEDACpZr8QO+l1tYpp1zAWJEw+VTHKVcg:geXQhO4634mpZgQO+RwEqh+NHVg
Checks for missing Authenticode signature.
resource |
---|
30ed5150ff35f8373e66ff652c0aa586_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
NtClose
BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
BaseSetProcessCreateNotify
BaseSrvNewObDirAcls
BaseSrvNlsLogon
BaseSrvNlsUpdateRegistryCache
ServerDllInitialization
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE