CreateProcessNotify
clipstrt
Static task
static1
Behavioral task
behavioral1
Sample
15adec0564b12efc1c11da32ad159ecf_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
15adec0564b12efc1c11da32ad159ecf_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
15adec0564b12efc1c11da32ad159ecf_JaffaCakes118
Size
51KB
MD5
15adec0564b12efc1c11da32ad159ecf
SHA1
a27bf5b14fe2ef1c5e31eda674944b402ee0906a
SHA256
7b46777db6d8cbd0dae5d9fc39a148f55cdc028b095983f17f81c195fe800eb6
SHA512
ebbca3151ffdd324be92efe1fcbc53fac1dcc5dbbe7998c6f97e8289ab406d7c4c2f1dc09b84ea60db52f0273efcaffd863f29f05d257626bbfc1f6fe72d5fee
SSDEEP
768:7Uzs3YTKTQOpga0JuaHT5wv7Gp0SZaBWVz/5CEaNFBTFOfoOHQu8qO6BBTKKYsRQ:YzzuKT5wvCpbZ5XC/Bhw9H1G6XT
Checks for missing Authenticode signature.
resource |
---|
15adec0564b12efc1c11da32ad159ecf_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Options_RunDLLA
ImmWINNLSEnableIME
ImmGetConversionListA
strtoul
Control_RunDLL
_vsnwprintf
strtol
DAD_ShowDragImage
ImmReleaseContext
ILGetSize
memmove
ImmSetStatusWindowPos
ImmActivateLayout
_strupr
ILCloneFirst
DragQueryFile
mbstowcs
wcsstr
ImmSendIMEMessageExA
_itow
wcsncpy
PathIsExe
ExtractIconExA
DragFinish
ILCreateFromPath
ILLoadFromStream
ImmGetIMCCLockCount
ImmLoadIME
ImmFreeLayout
ExitProcess
MapViewOfFile
MapViewOfFileEx
UnmapViewOfFile
InterlockedDecrement
CreateFileMappingA
OpenThread
IsProcessorFeaturePresent
VirtualQuery
SleepEx
WaitForMultipleObjects
CreateEventA
GetThreadSelectorEntry
InitializeCriticalSection
EnterCriticalSection
ReadFile
InterlockedExchangeAdd
SetFilePointer
LeaveCriticalSection
GetThreadPriority
InterlockedIncrement
ReadFileScatter
SetThreadPriority
CreateFileA
CreateProcessNotify
clipstrt
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ