CreateProcessNotify
imapreg
Static task
static1
Behavioral task
behavioral1
Sample
0a54f37b0f5038f72a75613977d6fcd1_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0a54f37b0f5038f72a75613977d6fcd1_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0a54f37b0f5038f72a75613977d6fcd1_JaffaCakes118
Size
52KB
MD5
0a54f37b0f5038f72a75613977d6fcd1
SHA1
5b466b2e5900748261547fe78700cd9e04bea9c2
SHA256
42e4cd21745605a5f046fcb17b5d09ba098dace34a930363ceed361d10b644f9
SHA512
9b3dfcbd1429f693926f5d75bc53645d976157ea2d30f9b2651ac65c9f63bd8a32fb98ad6818de610451b7db3f5e65ca851afb170b3e6642011c5b03bf62c23f
SSDEEP
1536:BQBfj5zQvC044M+/ijBRtaAgi1+7CDZYHnUyp1Sj:BQ9j582Q6jp54kZkUy4
Checks for missing Authenticode signature.
resource |
---|
0a54f37b0f5038f72a75613977d6fcd1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PathProcessCommand
ImmLoadIME
Options_RunDLLA
RealShellExecuteA
RestartDialogEx
SdbQueryDataEx
ImmGetImeInfoEx
PifMgr_SetProperties
ImmGenerateMessage
CDefFolderMenu_Create
ImmCallImeConsoleIME
DragQueryPoint
SdbOpenDatabase
ImmGetAppCompatFlags
IsUserAnAdmin
ImmGetHotKey
ShimDumpCache
SdbGetStringTagPtr
IsLFNDrive
PathQualify
FreeIconList
Options_RunDLL
CtfAImmActivate
ImmLockClientImc
SdbGetPermLayerKeys
ILIsEqual
CtfImmIsCiceroEnabled
CallCPLEntry16
ImmGetVirtualKey
ImmUnlockImeDpi
SdbFindNextMsiPackage
RealDriveType
ImmGetCompositionWindow
PickIconDlg
DuplicateIcon
ImmGetCandidateWindow
GetKeyboardLayoutCP
DAD_AutoScroll
ImmSendIMEMessageExA
DllGetVersion
ImmUnlockIMC
ILLoadFromStream
DllRegisterServer
DAD_DragLeave
CtfImmSetAppCompatFlags
PathCleanupSpec
SdbGetDatabaseVersion
ILFindLastID
ImmGetIMEFileNameA
Sleep
LoadResource
CreateFileMappingA
WaitForMultipleObjects
MultiByteToWideChar
GlobalAlloc
ExitThread
EraseTape
GetModuleHandleA
WaitForSingleObject
FlushFileBuffers
UnhandledExceptionFilter
GetSystemTime
UnmapViewOfFile
MapViewOfFile
CreateThread
LockResource
VirtualQueryEx
GetCurrentThreadId
GetSubMenu
SetTimer
IsWindowVisible
DestroyWindow
GetActiveWindow
InvalidateRgn
NetApiBufferFree
InitializeSecurityDescriptor
GetTokenInformation
isdigit
CreateProcessNotify
imapreg
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ