NxCreatePMap
RichInkFilterDirect
Static task
static1
Behavioral task
behavioral1
Sample
0d7d0a44154894a5c1a60c1fb426f450_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0d7d0a44154894a5c1a60c1fb426f450_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0d7d0a44154894a5c1a60c1fb426f450_JaffaCakes118
Size
159KB
MD5
0d7d0a44154894a5c1a60c1fb426f450
SHA1
74310c81a9216171b1aa5313d816f7a29b721079
SHA256
6110ec0673284eb85d3ed0e60cf5ba79695f32cdd996b64b4b6ccacad3a59f90
SHA512
b74548e47795d378eb7b0e1e841b578212b84570ae5c46bd0ac59c30dc85aee29c7629fe74733a3ba3555e2ba646b085b412b95389fd51b37dd73bc4609c2a13
SSDEEP
3072:jaUwNeWc+d2XefagV+mP09QLj1+Oyv5G2rPANk8:jZwgWc+9fH5PiKQOypkW
Checks for missing Authenticode signature.
resource |
---|
0d7d0a44154894a5c1a60c1fb426f450_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CloseHandle
ExitProcess
FindResourceA
GetACP
GetCommandLineA
GetLastError
GetModuleHandleA
GetOEMCP
GetStartupInfoA
GetStdHandle
HeapAlloc
HeapCreate
HeapDestroy
HeapSize
LoadLibraryA
LoadResource
MultiByteToWideChar
RtlUnwind
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
SizeofResource
TlsGetValue
lstrcpynA
lstrlenA
fprintf
__p__commode
_cexit
_wcsicmp
_XcptFilter
DeleteMenu
ReleaseDC
DefMDIChildProcA
VarBstrCat
SetErrorInfo
SafeArrayDestroy
OleLoadPicture
GetErrorInfo
VarBstrCmp
PathBuildRootA
PathFileExistsA
ChrCmpIA
PathFindOnPathA
PathGetCharTypeA
PathGetDriveNumberA
SHDeleteValueA
SHOpenRegStreamA
PathAppendA
NxCreatePMap
RichInkFilterDirect
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ