CreateProcessNotify
edlifind
Static task
static1
Behavioral task
behavioral1
Sample
0fc262f88bbf902a5df95183d9d23454_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0fc262f88bbf902a5df95183d9d23454_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
0fc262f88bbf902a5df95183d9d23454_JaffaCakes118
Size
49KB
MD5
0fc262f88bbf902a5df95183d9d23454
SHA1
489404533d06b7fd0ef176b111a61f2dd49a7807
SHA256
ee37a348b5930389de77ba23f8f878caacd0e47735c0f5914004452909949135
SHA512
5313aafd7ec2ade4810e0540866f9f456e1d7e8260b0efb4a3c0477a927d50b195dcf3ca9388085b16cdb4a2af15f917bc22ddd7315e5e4bd8a64bb17aa4dace
SSDEEP
768:YK2boqPTM4y2XV0X9xnD4d1Tz1YU2cq0ViqFzRUxyRCMj4SKCDOenv15To:t2cSTMZnDW1TzKLhaRUARCM9HOOtRo
Checks for missing Authenticode signature.
resource |
---|
0fc262f88bbf902a5df95183d9d23454_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DragFinish
OpenRegStream
IsNetDrive
SdbCloseApphelpInformation
SdbCreateMsiTransformFile
ImmSetStatusWindowPos
SdbUnregisterDatabase
CtfImmIsCiceroStartedInThread
SdbReadBYTETagRef
ImmGetStatusWindowPos
SdbGetTagFromTagID
ImmEnumRegisterWordA
SdbReadQWORDTag
GetFileNameFromBrowse
CtfImmLastEnabledWndDestroy
SdbReadBYTETag
SdbReadDWORDTag
SdbGrabMatchingInfoEx
ImmGetCompositionFontA
ImmGetDefaultIMEWnd
RegenerateUserEnvironment
ILRemoveLastID
ILSaveToStream
CtfImmLeaveCoInitCountSkipMode
PathCleanupSpec
ILFindChild
SdbGetBinaryTagData
SdbFreeFlagInfo
DAD_DragEnterEx
SdbGetPermLayerKeys
SdbReadStringTagRef
ILLoadFromStream
SdbOpenApphelpDetailsDatabase
SdbOpenDatabase
CtfImmHideToolbarWnd
SdbReadMsiTransformInfo
TerminateThread
HeapCreate
HeapDestroy
InterlockedIncrement
GetUserDefaultLangID
CallNamedPipeA
SuspendThread
CreateNamedPipeA
CreateFileA
SetFilePointer
InterlockedDecrement
HeapAlloc
UnmapViewOfFile
CreateFileMappingA
WaitForMultipleObjects
lstrcpyA
WaitForSingleObjectEx
GetFileAttributesA
MapViewOfFile
SetThreadExecutionState
GetThreadSelectorEntry
ReadFile
ResumeThread
ConnectNamedPipe
HeapFree
GetModuleHandleA
RegisterWaitForSingleObjectEx
GetThreadTimes
OpenThread
GetUserDefaultLCID
WaitNamedPipeA
CreateThread
WaitForMultipleObjects
VirtualQueryEx
ConvertDefaultLocale
SetBrushOrgEx
CreateCompatibleBitmap
BitBlt
CreateDIBSection
DeleteObject
SelectPalette
FillRect
MapWindowPoints
GetWindowRect
SetTimer
SetFocus
CreateProcessNotify
edlifind
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ