CreateProcessNotify
dns-GDI
Static task
static1
Behavioral task
behavioral1
Sample
fb9383a9dc4219bc03bb595eabc0879f_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fb9383a9dc4219bc03bb595eabc0879f_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
fb9383a9dc4219bc03bb595eabc0879f_JaffaCakes118
Size
47KB
MD5
fb9383a9dc4219bc03bb595eabc0879f
SHA1
38d23367974467928b23e1c5780bc47fea9f9532
SHA256
79866adb4a2253fa8f092d50cb93ee1bd0d1bd55649ae3b5f5ff24e3ed57119b
SHA512
43ae3d0fb117d7e79f4c534b744400db8946625cf577001e75b24609cff1263693ddb999cd49c3339b7ef30d2f67c6da90eecf27aa0957953852c903a41ba6e4
SSDEEP
768:UhidWKPv/JsdkkD+uN5/22ePrRpQaqjsr8SDUdPVz2L8JfL30F:UcdXv/JsXDf5OxRxqjsr8tdPVKLoDEF
Checks for missing Authenticode signature.
resource |
---|
fb9383a9dc4219bc03bb595eabc0879f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
UnmapViewOfFile
GetEnvironmentStringsA
GetStringTypeExA
CreateThread
ReadFile
FreeEnvironmentStringsA
MapViewOfFile
SetThreadExecutionState
SetFilePointerEx
WriteFile
WaitForMultipleObjects
CreateFileMappingA
PostQueuedCompletionStatus
SetFilePointer
GetModuleHandleA
GetQueuedCompletionStatus
OpenThread
SetThreadPriorityBoost
RtlMoveMemory
lstrcpynA
ExitThread
CreateFileA
GetVersion
InterlockedIncrement
GetSystemTimeAsFileTime
lstrcatA
CreateIoCompletionPort
InterlockedDecrement
VirtualQuery
GetCurrentProcessId
PathIsExe
DragQueryFileA
SdbGetStandardDatabaseGUID
ImmReSizeIMCC
ImmActivateLayout
ReadCabinetState
ILCloneFirst
PathQualify
CtfAImmDeactivate
FreeIconList
CtfImmEnterCoInitCountSkipMode
SdbResolveDatabase
ExtractIconA
DAD_SetDragImage
ImmWINNLSEnableIME
DAD_AutoScroll
ImmGetCompositionFontA
RegenerateUserEnvironment
ShimDumpCache
ImmSendIMEMessageExA
ExtractAssociatedIconExA
ImmSetCompositionWindow
SdbTagRefToTagID
ILFree
SdbReadDWORDTag
ImmDisableIME
CreateProcessNotify
dns-GDI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ