CreateProcessNotify
SndVlist
Static task
static1
Behavioral task
behavioral1
Sample
6f9384c7a540eb10e39fdac6e88fd30f_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6f9384c7a540eb10e39fdac6e88fd30f_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
6f9384c7a540eb10e39fdac6e88fd30f_JaffaCakes118
Size
49KB
MD5
6f9384c7a540eb10e39fdac6e88fd30f
SHA1
602dc8db4a304f242dbadefcfcc17c9c4daafc64
SHA256
e1d45dd2dec6a00c90e7377397b7ba7dc3d60069e9e823413095ebe42e25bf5a
SHA512
5a14893b73ff04dcdc63fbcc88cd567553903644dc3657b9b4daa396a34ce56e2fc229ff0c2a91b1f6cef5351962163ce08c20a25fe5ac35f883e167d5960bc4
SSDEEP
1536:7OLzexlx9XbDcfgMZpfZVF3X9ctYg8god:7mWtDGgMDZGtYg
Checks for missing Authenticode signature.
resource |
---|
6f9384c7a540eb10e39fdac6e88fd30f_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ConnectNamedPipe
SetNamedPipeHandleState
IsProcessorFeaturePresent
SetFilePointer
GetFileAttributesExA
MapViewOfFile
MapViewOfFileEx
ReadFile
ExitProcess
RegisterWaitForInputIdle
WaitForMultipleObjects
VirtualQueryEx
ReadFileScatter
GetThreadLocale
WriteFile
OpenThread
UnmapViewOfFile
CreateFileMappingA
SetThreadIdealProcessor
CreateFileA
IsLFNDriveA
ImmUnregisterWordA
ILFindLastID
RestartDialogEx
ImmNotifyIME
Options_RunDLLA
IsLFNDrive
_wcsupr
ImmGetContext
CtfImmTIMActivate
ImmLockIMCC
ImmGetAppCompatFlags
DAD_AutoScroll
isalpha
isupper
ImmGetDescriptionA
DllGetVersion
ImmInstallIMEA
CreateProcessNotify
SndVlist
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ