CreateProcessNotify
dpnsnify
Static task
static1
Behavioral task
behavioral1
Sample
3272a77e57249cb5ca0f14130d569201_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3272a77e57249cb5ca0f14130d569201_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3272a77e57249cb5ca0f14130d569201_JaffaCakes118
Size
49KB
MD5
3272a77e57249cb5ca0f14130d569201
SHA1
ae7a84c48e2c29f7469639c9def056fc0ca6537f
SHA256
311f54a84facbc7947883a4f09634c32dacd9908a5d90842338cbc7cc04cfa0e
SHA512
e5a18f28c5d8c65242f181ffef99c91c69d74b21ff8b047fcb369dc8659f5b46dc6c27196a7b0de2eb0ed2d90663b65952202d6e3000e237972438cc9d1b3946
SSDEEP
1536:ybZcIkkgIJDWAd7una6coux8j6cp7XxB5:ScmRDWPna4buc1
Checks for missing Authenticode signature.
resource |
---|
3272a77e57249cb5ca0f14130d569201_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WaitForMultipleObjects
CreateFileA
UnmapViewOfFile
ReadFile
SleepEx
CreateFileMappingA
CreateIoCompletionPort
IsProcessorFeaturePresent
DeleteFileA
OpenThread
VirtualQuery
SetThreadLocale
SetFilePointer
SwitchToThread
CreateEventA
HeapFree
ExitProcess
MapViewOfFileEx
HeapAlloc
GetStringTypeA
_CIlog
DllRegisterServer
ImmGetDescriptionA
PathProcessCommand
wcslen
ImmSystemHandler
ImmGetOpenStatus
ImmEscapeA
_wcsnicmp
_wtoi
ImmDisableTextFrameService
atoi
ExtractIconResInfoA
RestartDialog
towlower
DAD_AutoScroll
ExtractIconEx
_memccpy
DllGetVersion
CtfImmIsCiceroStartedInThread
CreateProcessNotify
dpnsnify
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ