ClosePrintProcessor
ControlPrintProcessor
EnumPrintProcessorDatatypesW
GetPrintProcessorCapabilities
InitializePrintProcessor
InstallPrintProcessor
OpenPrintProcessor
PrintDocumentOnPrintProcessor
Static task
static1
Behavioral task
behavioral1
Sample
e11ec27cb87017e9ff80d4c663415f73_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
e11ec27cb87017e9ff80d4c663415f73_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
e11ec27cb87017e9ff80d4c663415f73_JaffaCakes118
Size
220KB
MD5
e11ec27cb87017e9ff80d4c663415f73
SHA1
1e4172d276d233c8d2ae35e47cb936d6212debfc
SHA256
955cf770f8641d6e0dc8d65120bc6edfd798056b8ca86ccd7ccf7f3f79973d1b
SHA512
4031fcac845b9fd6c09856ffc679bf1d0995376dd84c812e4242eecf4c35c9a5ec36169790b1bcba2d989fba25ca7e00b8584ff711843e78fd0b37ab792e9335
SSDEEP
3072:5GkqV89dToIPGZ2AOHV9smm04AGNtehPxEm6iySOCNja6ucx:54CtPGwAOHV9smm041B3zc
Checks for missing Authenticode signature.
resource |
---|
e11ec27cb87017e9ff80d4c663415f73_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SetLastError
WaitForSingleObject
ResetEvent
SetEvent
CloseHandle
LocalFree
CreateEventA
LocalAlloc
GetLastError
TlsAlloc
WideCharToMultiByte
TlsFree
InterlockedIncrement
InterlockedDecrement
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
RtlUnwind
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
WritePrinter
EndDocPrinter
ReadPrinter
ClosePrinter
ImfGetLastError
ImfPrintJob
OpenPrinterA
s2Native
s2ANSI
s2OpenPrinter
s2ByteLength
s2Enable
s2Disable
s2StartDocPrinter
GetPrinterA
GetPrinterDataA
ZSP_MakeSpoolFilePath
s2Set
ClosePrintProcessor
ControlPrintProcessor
EnumPrintProcessorDatatypesW
GetPrintProcessorCapabilities
InitializePrintProcessor
InstallPrintProcessor
OpenPrintProcessor
PrintDocumentOnPrintProcessor
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ