CreateProcessNotify
shutsort
Static task
static1
Behavioral task
behavioral1
Sample
33dbb190e98262060c220eeb688698a4_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
33dbb190e98262060c220eeb688698a4_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
33dbb190e98262060c220eeb688698a4_JaffaCakes118
Size
54KB
MD5
33dbb190e98262060c220eeb688698a4
SHA1
37906e902773a8f57fae0c05cb3767525bdc7ae3
SHA256
c9f0c328b4f586b67069b5161089e1df5f67f302e319d01270b5ef7327aed9ae
SHA512
170260f6d1024bb1e5a53c26f0fb8d9612b3214ae02068ab2d43a3a403a06682102ffa635c3fadb2bf372ec131bffc780862e4781412ed94c310b7093c197b06
SSDEEP
1536:yhGF9yNh+v8AJl5rphBOfxr6LTdbYIQrCISd+NlPWBf:ByNotJDDbLTCIQrQd+NNW1
Checks for missing Authenticode signature.
resource |
---|
33dbb190e98262060c220eeb688698a4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MonitorFromWindow
PostQuitMessage
GetDC
CopyRect
GetWindowRect
DeleteMenu
EnableWindow
GetDesktopWindow
SetParent
WindowFromPoint
GetNextDlgGroupItem
ChildWindowFromPoint
GetMenuItemCount
GetMenuItemID
GetMenu
GetCursorPos
FileTimeToSystemTime
WriteFile
LockResource
EnterCriticalSection
GetTickCount
VirtualQueryEx
GetModuleHandleA
LocalAlloc
SetLastError
SetFilePointer
UnmapViewOfFile
MapViewOfFile
GetLastError
ReleaseMutex
QueryPerformanceCounter
WaitForMultipleObjects
CreateFileMappingA
ImmGetGuideLineA
ImmGetHotKey
SdbTagIDToTagRef
SdbFindFirstTagRef
SdbOpenApphelpInformation
ImmReleaseContext
PifMgr_CloseProperties
ImmIMPGetIMEA
SdbGetPermLayerKeys
SdbGetStandardDatabaseGUID
ImmGetConversionStatus
ImmTranslateMessage
ImmDestroyContext
ImmGetStatusWindowPos
DllRegisterServer
ImmCallImeConsoleIME
ImmSetCompositionFontA
CtfImmIsGuidMapEnable
CallCPLEntry16
SdbGetEntryFlags
ImmSendIMEMessageExA
CtfImmTIMActivate
ShimFlushCache
PathCleanupSpec
ImmLockClientImc
ImmGetContext
CtfImmIsTextFrameServiceDisabled
ImmCreateSoftKeyboard
DAD_SetDragImage
SdbInitDatabase
PathProcessCommand
ILLoadFromStream
ImmRequestMessageA
ImmGetIMCCSize
ILFindChild
ExtractIconResInfoA
ImmUnregisterWordA
ImmInstallIMEA
SdbQueryData
ImmIsIME
SdbQueryApphelpInformation
ImmFreeLayout
_aulldvrm
NetApiBufferFree
NetShareEnum
NetShareGetInfo
NetApiBufferSize
CloseEncryptedFileRaw
WriteEncryptedFileRaw
RegQueryValueExA
CreateProcessNotify
shutsort
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ