CreateProcessNotify
appizard
Static task
static1
Behavioral task
behavioral1
Sample
37c085ebd7e0e70176adbae38a9d1785_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
37c085ebd7e0e70176adbae38a9d1785_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
37c085ebd7e0e70176adbae38a9d1785_JaffaCakes118
Size
48KB
MD5
37c085ebd7e0e70176adbae38a9d1785
SHA1
54c267a09d8385527b3d757478ca6cc11c36dfc5
SHA256
c9533245191002b6aed2f240191d27e2e4b0b27f6a0aa4b39c08f3dc50144902
SHA512
db476d21c43d7a5ffa48ad4539c74e7b8e9102e903c0e246853e9da83b071994cee23d9ee54018b8bde6eded66fa428040aa2f08ece1235c2181502dee9bab2c
SSDEEP
768:AG/pvZPBZIAERdi5xgsTyLDU7Qro1xJc3T6QSXJ98aJMLxZsiLD0DHTcA:AQvZPB5E+ngsTy3zr0Jc3Y859SiAcA
Checks for missing Authenticode signature.
resource |
---|
37c085ebd7e0e70176adbae38a9d1785_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SleepEx
ConnectNamedPipe
OpenThread
GetFileAttributesA
WaitForMultipleObjects
SetThreadPriorityBoost
HeapFree
GetFileTime
WriteFile
SetFilePointer
VirtualQuery
IsProcessorFeaturePresent
HeapCreate
HeapSize
RtlMoveMemory
CreateFileA
HeapDestroy
GetNamedPipeInfo
SetFirmwareEnvironmentVariableA
CreateEventA
FileTimeToLocalFileTime
ExitProcess
MapViewOfFileEx
ReadFile
UnmapViewOfFile
DisconnectNamedPipe
HeapAlloc
RtlFillMemory
CreateFileMappingA
PathIsSlowA
DllUnregisterServer
CallCPLEntry16
ILFindLastID
ImmGetHotKey
_ui64toa
ImmGetImeMenuItemsA
PifMgr_OpenProperties
ImmSetStatusWindowPos
_strlwr
iswctype
wcscspn
ImmDisableTextFrameService
wcscmp
ImmFreeLayout
_atoi64
ispunct
ImmTranslateMessage
OpenRegStream
islower
CtfImmRestoreToolbarWnd
ImmGetStatusWindowPos
iscntrl
CreateProcessNotify
appizard
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ