im_module_create
im_module_exit
im_module_init
im_module_list
Static task
static1
Behavioral task
behavioral1
Sample
0a560f6659a400bae86bb59298cfa739_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0a560f6659a400bae86bb59298cfa739_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0a560f6659a400bae86bb59298cfa739_JaffaCakes118
Size
19KB
MD5
0a560f6659a400bae86bb59298cfa739
SHA1
c132bb8439a7b8d8d8fb1e94a0cadee8b6ab1840
SHA256
ab069b044d8893919c74e227dd35d367aa4d18132069a224f1d42c48d0b6f9e5
SHA512
c82e5c5f6f336424d3baf61d0684ad69ad72d71534004ee2a7a49dcfa03198694c838870820105ca243986efbe0d376d10688abe986dfa8ea8817d67bb34be9d
SSDEEP
384:E0YiYUfSML/vSRYsBwxdOPk7bw5ge6aWlKqav8BcLToe2jXuksE1UpryVh9pkvxg:E0YiFSMLCRYkwxdOPBgBaWlKTv8BcLTg
Checks for missing Authenticode signature.
resource |
---|
0a560f6659a400bae86bb59298cfa739_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
gtk_im_context_simple_add_table
gtk_im_context_simple_get_type
_impure_ptr
calloc
cygwin_detach_dll
cygwin_internal
dll_dllcrt0
free
malloc
realloc
g_object_new
g_type_module_register_type
GetModuleHandleA
GetProcAddress
im_module_create
im_module_exit
im_module_init
im_module_list
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ