CreateProcessNotify
GDIress
Static task
static1
Behavioral task
behavioral1
Sample
e0ec92dd222c5e6a67827e06a4d58684_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
e0ec92dd222c5e6a67827e06a4d58684_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
e0ec92dd222c5e6a67827e06a4d58684_JaffaCakes118
Size
53KB
MD5
e0ec92dd222c5e6a67827e06a4d58684
SHA1
fef6e92d4561726d7e77418afa96be8ca27d9af9
SHA256
a9013d2e6a292c46cd5d0f5ea4bd0239f78dec3091fdd5117447d70630646f27
SHA512
52804a70ddbde16d30d21a932ed3ef207a92b92f50b4bceb54af19fa14cb864e9b2dd7da9cdeb3726688163eb7012b051191c93753b4ca40783773f8a7ca1861
SSDEEP
768:fYMvTqAxbOdZBjgjr+Gkm/xR+YNwotwyPj3CDh9fEzIy08ss6ehWt8WumFiC:fhWsboZejrk+RN/lmDSIhyWidVC
Checks for missing Authenticode signature.
resource |
---|
e0ec92dd222c5e6a67827e06a4d58684_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PathResolve
DragFinish
wcscmp
wcstombs
DAD_DragMove
_wcslwr
CtfImmIsGuidMapEnable
sin
isupper
DuplicateIcon
__iscsym
_vsnprintf
_ltoa
wcstol
ILSaveToStream
sprintf
RealShellExecuteA
toupper
SetThreadPriorityBoost
CreateFileA
ReadFile
CreateEventA
CreateFileMappingA
GetCurrentDirectoryA
IsBadStringPtrA
GetThreadLocale
RtlZeroMemory
VirtualQuery
SetFilePointer
WaitForMultipleObjectsEx
MapViewOfFileEx
SleepEx
SetFirmwareEnvironmentVariableA
IsProcessorFeaturePresent
UnmapViewOfFile
EncodePointer
ReadFileEx
OpenThread
WaitForMultipleObjects
DecodePointer
ExitProcess
CreateProcessNotify
GDIress
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ