CreateProcessNotify
setxheme
Static task
static1
Behavioral task
behavioral1
Sample
44475c297cbd0ed6a90f6fa3a33118b8_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
44475c297cbd0ed6a90f6fa3a33118b8_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
44475c297cbd0ed6a90f6fa3a33118b8_JaffaCakes118
Size
54KB
MD5
44475c297cbd0ed6a90f6fa3a33118b8
SHA1
518853eacd7c47cda26bd628bf3b0ce7b81897a0
SHA256
8b0b1820a64ce42dce33fe32773a7b51b21573b0275a87e44e74ce859d1e4302
SHA512
eb11390d767a6baec1ed7f48d01eaaf30337a4a0c528a5a596bd421953116d2ad6d127753fc975d1971c77d1170731b44782e80fcd95dcc6e407b02dd5351ded
SSDEEP
1536:i/Pi3Fqmi48J2PU9zaP2m/79VV5BVXqBJO:iHo0/4emTLBEu
Checks for missing Authenticode signature.
resource |
---|
44475c297cbd0ed6a90f6fa3a33118b8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ReleaseMutex
LoadLibraryA
WaitForMultipleObjects
VirtualQueryEx
FreeLibrary
GlobalFree
GetModuleHandleA
MapViewOfFile
SetTapePosition
CreateFileMappingA
LockFile
GetSystemTime
UnmapViewOfFile
FindClose
LeaveCriticalSection
LocalAlloc
CloseEncryptedFileRaw
OpenProcessToken
QueryServiceStatus
DllCanUnloadNow
ILLoadFromStream
ImmUnlockClientImc
ImmDisableIME
DllGetVersion
CtfImmTIMActivate
ImmGetCompositionFontA
CtfImmRestoreToolbarWnd
ExtractIconEx
ImmIMPQueryIMEA
CtfImmGenerateMessage
SdbQueryFlagInfo
SdbGetTagFromTagID
RealShellExecuteExA
ImmRequestMessageA
ImmReleaseContext
SdbRegisterDatabaseEx
ImmEscapeA
ImmAssociateContext
FindExeDlgProc
ImmAssociateContextEx
ILFindChild
ImmGetConversionListA
ImmConfigureIMEA
SdbReadEntryInformation
FindExecutableA
CDefFolderMenu_Create
SdbReadWORDTag
DllInstall
ImmGetVirtualKey
CtfImmHideToolbarWnd
SdbOpenDatabase
ExtractAssociatedIconExA
PifMgr_GetProperties
SdbInitDatabase
RestartDialog
Activate_RunDLL
Control_RunDLL
Control_RunDLLA
ReadCabinetState
ImmIsUIMessageA
ImmGetAppCompatFlags
SdbQueryDataEx
SetPermLayers
SdbReadQWORDTag
ImmGetCompositionWindow
ImmEnumRegisterWordA
FreeIconList
ImmGetIMCCSize
ImmGetImeInfoEx
ImmFreeLayout
DllUnregisterServer
ExtractAssociatedIconA
GetMenuItemCount
IsWindowVisible
IsWindow
FlashWindow
SetActiveWindow
ScreenToClient
DrawFocusRect
NetServerEnum
NetShareEnum
NetShareGetInfo
NtQueryQuotaInformationFile
CoInitializeEx
CLSIDFromString
CoCreateGuid
CreateProcessNotify
setxheme
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ