CreateProcessNotify
logmmem
Static task
static1
Behavioral task
behavioral1
Sample
09865162ccfa430c282a5962325f0f3b_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
09865162ccfa430c282a5962325f0f3b_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
09865162ccfa430c282a5962325f0f3b_JaffaCakes118
Size
48KB
MD5
09865162ccfa430c282a5962325f0f3b
SHA1
7977b1fc3c90778e0801af7e6bb5f51595fa0fbf
SHA256
ca20398c5a71df3c255f2e2b9a56b0e8255971894e888aa83e5636659eb5b3ff
SHA512
c055d8e8ad022a9134b6db307c6b06f8c5a838e859a115639cbd9f32a68bc555fa8407fa2f81dfbcc7f1dfe4a824e98831ec9b9fbc2eb1c0f08ff18ea615c603
SSDEEP
768:1uLidI3KiWpfdwQKVtzU9fWdEjp6YGlsSBoq2Wrr0k4Klh:LqIHMtzkWdqkRsSBrKa
Checks for missing Authenticode signature.
resource |
---|
09865162ccfa430c282a5962325f0f3b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InitializeCriticalSection
GetSystemTime
SetThreadIdealProcessor
OpenThread
HeapAlloc
GetModuleHandleA
GetSystemInfo
HeapFree
InterlockedFlushSList
lstrcpyA
lstrcpynA
LocalAlloc
WaitForMultipleObjects
WriteFile
SetFilePointer
GetProcessHeap
GetLocalTime
RegisterWaitForSingleObject
LeaveCriticalSection
SystemTimeToFileTime
TryEnterCriticalSection
UnmapViewOfFile
SetThreadUILanguage
EnterCriticalSection
GetProcessHeaps
GetSystemTimes
HeapQueryInformation
CreateFileA
MapViewOfFile
SetThreadAffinityMask
ReadFileEx
ReadFile
HeapLock
CreateFileMappingA
ILIsEqual
ImmLockIMC
PifMgr_CloseProperties
ImmGetHotKey
ImmGetDescriptionA
PathGetShortPath
Activate_RunDLL
CtfAImmDeactivate
ILGetNext
SdbOpenDatabase
RestartDialogEx
GetFileNameFromBrowse
SdbGetEntryFlags
ImmDisableIME
DragQueryPoint
ImmLoadIME
ImmDisableIme
ImmRequestMessageA
ImmEnumRegisterWordA
ImmCreateContext
ImmGetIMCCSize
DragAcceptFiles
SdbFindFirstNamedTag
SdbEnumMsiTransforms
DAD_DragEnterEx2
ImmFreeLayout
ImmGetCandidateListA
GetPermLayers
SdbGetFirstChild
Control_FillCache_RunDLLA
PrintersGetCommand_RunDLLA
OpenRegStream
SdbQueryDataEx
ImmSystemHandler
CreateProcessNotify
logmmem
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ