CreateProcessNotify
DllGetVersion
Static task
static1
Behavioral task
behavioral1
Sample
dbae47be94d59986aa4e1f82cf3cfdfd_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dbae47be94d59986aa4e1f82cf3cfdfd_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
dbae47be94d59986aa4e1f82cf3cfdfd_JaffaCakes118
Size
53KB
MD5
dbae47be94d59986aa4e1f82cf3cfdfd
SHA1
10a212ee58b076f77faa42f80d382d488eb2d687
SHA256
53fc4e8ea30b7bee5433fdda7c77684f57882d028728d3e9d007967b15b509da
SHA512
2fdefa05a87d7f508c312ad40699927a7169cd74c0cc5c04e88b0f3cae1e91e4ecd2f0385285d4cb37ad98322846e9d84cd132198e40749ae13b9d1d203e18da
SSDEEP
768:Fnm1tv3+ot5kUDoahoFMeAJOtNgjH9sScNEgKBvOqXosQa8vDxLWaM+1gh:1m1V3+ot5kUDomoMXOkr9sS8EgKB2Qh
Checks for missing Authenticode signature.
resource |
---|
dbae47be94d59986aa4e1f82cf3cfdfd_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ImmGetIMCCLockCount
ImmGetImeMenuItemsA
_itow
_tolower
CtfImmSetAppCompatFlags
ImmGetCandidateWindow
_memicmp
CtfImmCoUninitialize
_splitpath
RealShellExecuteA
iswspace
wcstombs
ceil
strcat
CtfImmDispatchDefImeMessage
_alloca_probe
__isascii
ImmSetConversionStatus
ImmGetRegisterWordStyleA
_alldvrm
abs
ExtractIconExA
ImmCreateContext
_CIpow
_wtoi
ILCloneFirst
ImmIMPGetIMEA
ImmIMPQueryIMEA
GetThreadTimes
SetCurrentDirectoryA
EncodePointer
ConnectNamedPipe
InterlockedExchange
SetFilePointer
IsProcessorFeaturePresent
WriteFile
DecodePointer
GetQueuedCompletionStatus
GetStringTypeExA
SetNamedPipeHandleState
UnmapViewOfFile
CreateFileMappingA
OpenThread
ReadFile
CreateIoCompletionPort
CreateFileA
ExitProcess
WaitForMultipleObjects
MapViewOfFile
VirtualQueryEx
CreateFileMappingW
CreateProcessNotify
DllGetVersion
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ