CreateProcessNotify
contpand
Static task
static1
Behavioral task
behavioral1
Sample
3b1d50e16db5a17754a292eb0da8fe9f_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3b1d50e16db5a17754a292eb0da8fe9f_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3b1d50e16db5a17754a292eb0da8fe9f_JaffaCakes118
Size
55KB
MD5
3b1d50e16db5a17754a292eb0da8fe9f
SHA1
b2b8a709daa714fb0e20d5261fef6cc99b422585
SHA256
59eb43c6c5b50e75a9b7ae65822fb4d12fb7f5fd850598f1e2b1aeaa8f2338d2
SHA512
66b9b072b8512c6cd8b0ea829370748e309cb150aa6a467f3720b969c989139d3c83843c73bbd81dd7709b7c1ca31df8fe32da6c49a2d98d97daffa44335f8ff
SSDEEP
1536:8366M1A489qSfA3aY7JIl7V/4LI5RznX4Eo:C6zf8jA3n7ij4LI5FXb
Checks for missing Authenticode signature.
resource |
---|
3b1d50e16db5a17754a292eb0da8fe9f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
HeapSetInformation
SetFilePointer
ReadFile
GetModuleHandleA
InterlockedDecrement
CreateIoCompletionPort
ConvertDefaultLocale
GetSystemDefaultUILanguage
HeapSummary
HeapDestroy
VirtualQueryEx
UnmapViewOfFile
GetFileTime
CreateNamedPipeA
GetFileAttributesA
IsValidLocale
GetSystemDefaultLCID
LeaveCriticalSection
CreateFileMappingA
InterlockedIncrement
HeapFree
EnterCriticalSection
WaitForMultipleObjects
TransactNamedPipe
HeapCreate
HeapAlloc
GetLocaleInfoA
GetSystemDefaultLangID
InitializeCriticalSection
HeapQueryInformation
MapViewOfFile
ConnectNamedPipe
CreateFileA
RtlZeroMemory
CreateCompatibleDC
Arc
IsWindowEnabled
IsRectEmpty
DrawIconEx
ImmCreateSoftKeyboard
SdbCloseApphelpInformation
ImmGetIMEFileNameA
ImmGetIMCCSize
ImmSystemHandler
ImmSetActiveContext
ImmGetConversionStatus
ILSaveToStream
OpenRegStream
SdbFindNextTag
CtfImmIsCiceroEnabled
SdbReadEntryInformation
ImmShowSoftKeyboard
SdbOpenApphelpDetailsDatabase
CtfAImmIsIME
PathQualify
SdbGetDatabaseMatch
DuplicateIcon
Control_FillCache_RunDLLA
PathResolve
ILCombine
CDefFolderMenu_Create2
PrintersGetCommand_RunDLL
SdbGetStandardDatabaseGUID
GetPermLayers
IsNetDrive
SdbFindNextMsiPackage
CtfImmLeaveCoInitCountSkipMode
ILFree
IsLFNDrive
CtfImmGetGuidAtom
SdbRegisterDatabaseEx
DragQueryFile
ILGetSize
CreateProcessNotify
contpand
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ