CreateProcessNotify
ati2clip
Static task
static1
Behavioral task
behavioral1
Sample
447a722fc56b70a1980bf4252f19d6b0_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
447a722fc56b70a1980bf4252f19d6b0_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
447a722fc56b70a1980bf4252f19d6b0_JaffaCakes118
Size
49KB
MD5
447a722fc56b70a1980bf4252f19d6b0
SHA1
603c336580835fd022cc2792c0e0b416d8a0164c
SHA256
d6824c9b44b4fe983879266572a14cc186c41c02f5501693ca274aec12d0ae59
SHA512
2fb59798b36ad8ffc8df5eb4e50d83b37ecc20c67156845e6183352fb25e128cdcdfd0fb59718e26674ffcbddc33e01214c7730fa167be8f046f4962ec070809
SSDEEP
768:3vuAFZaotqdgJKdmTkKmjcz+yjZoebYB2ULQLdkciA+uNIdKCtar:f/Uk6gUmhmjcz5mHL4kcV7IcC
Checks for missing Authenticode signature.
resource |
---|
447a722fc56b70a1980bf4252f19d6b0_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WriteFile
SetThreadPriorityBoost
InterlockedExchangeAdd
IsProcessorFeaturePresent
VirtualQuery
ConnectNamedPipe
CreateFileMappingA
WaitForMultipleObjects
CreateFileA
ReadFile
GetThreadLocale
GetNamedPipeInfo
RtlMoveMemory
WriteFileGather
SetFilePointer
ExitProcess
MapViewOfFileEx
LeaveCriticalSection
UnmapViewOfFile
EnterCriticalSection
SleepEx
SetThreadContext
OpenThread
GetThreadIOPendingFlag
GetSystemTimes
CreateEventA
InitializeCriticalSection
wcsrchr
ILSaveToStream
wcscpy
isalpha
CtfAImmDeactivate
_ultoa
__iscsym
_aulldvrm
PrintersGetCommand_RunDLLA
_allmul
PathResolve
ImmGetContext
_itow
ImmIsUIMessageA
ImmGetConversionListA
ImmTranslateMessage
_toupper
iscntrl
ILGetNext
_allshl
CreateProcessNotify
ati2clip
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ