ClientDllCleanup
ClientDllStartup
CreateProcessNotify
Static task
static1
Behavioral task
behavioral1
Sample
89764cb88ad2af5706cfa94fadd1f4b3_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
89764cb88ad2af5706cfa94fadd1f4b3_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
89764cb88ad2af5706cfa94fadd1f4b3_JaffaCakes118
Size
45KB
MD5
89764cb88ad2af5706cfa94fadd1f4b3
SHA1
c8818cdbed3182c7529f7d3b3baaf05d75baf2d2
SHA256
c5f3886a61840037ae817708d67c3e278126cf5e76e7c89d2d323ea364a3778f
SHA512
1841cb65cb77250eb291560fba6e8394b381d969834bd5861a210424f947690963f12f44a80518c5aabb388804e2114ff2988c20dc86548ecf23cf852af2afed
SSDEEP
768:jff7Lnmq+R0KRyk2d+tEb/mNXN2/FvSzLBNHpto2yJuA3MiCOcw8h:jX7D9+R0KRykHEWNKgnJtdyJd8iewu
Checks for missing Authenticode signature.
resource |
---|
89764cb88ad2af5706cfa94fadd1f4b3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ImmDestroyContext
atoi
RealShellExecuteA
toupper
towupper
ImmGetVirtualKey
ILRemoveLastID
ImmLockImeDpi
CtfImmIsTextFrameServiceDisabled
Options_RunDLL
ImmUnlockClientImc
DllGetVersion
PathProcessCommand
InternalExtractIconListA
_stricmp
__toascii
iswxdigit
iscntrl
strpbrk
DragQueryPoint
PrintersGetCommand_RunDLL
ImmIMPGetIMEA
ImmProcessKey
ILCombine
ILSaveToStream
_aullshr
strrchr
_CIsin
ImmUnlockIMCC
ImmEnumInputContext
CtfImmTIMActivate
ImmGetConversionStatus
GetFileNameFromBrowse
_allrem
ExitProcess
SetProcessAffinityMask
CreateEventA
SetThreadAffinityMask
SwitchToThread
GetProcessAffinityMask
ClientDllCleanup
ClientDllStartup
CreateProcessNotify
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ