CreateProcessNotify
shutsort
Static task
static1
Behavioral task
behavioral1
Sample
31798ea69d6c3365aecda24fadfb06e8_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
31798ea69d6c3365aecda24fadfb06e8_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
31798ea69d6c3365aecda24fadfb06e8_JaffaCakes118
Size
47KB
MD5
31798ea69d6c3365aecda24fadfb06e8
SHA1
65d847bf7533ae6579aa7c29324964c402d0586e
SHA256
977e48eb1cae9c909864421673b7f6dbdc546b54180cf89e3978b799f25c9c03
SHA512
6da50c0f5f3412e1455f1a9f1026a1aadaf2ca69f6c88eabf11f271a33ebcd5a9d737728fbbbd718cde8c8be00b63385fd9d563238ac0f7c133b2a2976094280
SSDEEP
768:E1RxtTn6b+d8vSrFdiYRVe6rZfxZ01O1ZIi6WayRtvTr2BLtxyb7PBR:gZTnu+d8vSrFTVeQxxZ2EV6WayRNHetM
Checks for missing Authenticode signature.
resource |
---|
31798ea69d6c3365aecda24fadfb06e8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PickIconDlg
SdbFindFirstMsiPackage_Str
ShimDumpCache
ILClone
ImmNotifyIME
ImmGetDescriptionA
ILCloneFirst
DragQueryFile
DragQueryFileA
ImmIsIME
RegenerateUserEnvironment
ImmLockIMC
SdbDeletePermLayerKeys
ImmSetOpenStatus
PifMgr_OpenProperties
ImmGetProperty
SdbQueryApphelpInformation
ImmDisableIme
ImmWINNLSGetIMEHotkey
ILFree
ImmTranslateMessage
ImmReSizeIMCC
DllCanUnloadNow
ImmSetActiveContext
CtfImmTIMActivate
lstrcatA
GetCurrentProcess
MapViewOfFile
GetSystemTime
SetEnvironmentVariableA
CreateFileA
WriteFile
HeapQueryInformation
SetThreadLocale
TryEnterCriticalSection
UnmapViewOfFile
ConnectNamedPipe
GetEnvironmentStringsA
SetFilePointer
ReadFile
GetFileTime
WaitForMultipleObjects
FreeEnvironmentStringsA
CreateFileMappingA
EnterCriticalSection
GetSystemTimeAdjustment
InitializeCriticalSection
GetSystemInfo
lstrcpynA
LocalAlloc
OpenThread
GetProcessHeaps
LeaveCriticalSection
GetModuleHandleA
DeleteFileA
CreateIoCompletionPort
GetNamedPipeHandleStateA
GetThreadContext
WriteFileEx
CreateProcessNotify
shutsort
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ