CreateProcessNotify
lprping
Static task
static1
Behavioral task
behavioral1
Sample
13cc0ce18c41a1f55d5eb3eca5603d71_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
13cc0ce18c41a1f55d5eb3eca5603d71_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
13cc0ce18c41a1f55d5eb3eca5603d71_JaffaCakes118
Size
55KB
MD5
13cc0ce18c41a1f55d5eb3eca5603d71
SHA1
f918c46c26ef7c2da0da04cb4581151b440dbf5b
SHA256
e115c63e25f8f77a0bd64027f1cc148da4f7d8d6f56b0e106b742a8e098504f6
SHA512
99bd72c41b59770b9427223771fc33231ec74c203ad1765cc3d0a5d7537b6dff08adb64cf28fefcd5b705a66a9f2d1eaf1c0306fd6f6104b093b4319d01a68ff
SSDEEP
768:2n3xJ5oo1YErNaKd1CiQZ5vfpdQoxqkPzulx0inHpXK303XumrPMRYXJNT4b/ajW:23xJ5PYnN5dQCqkUtnHpEUDmYAqq
Checks for missing Authenticode signature.
resource |
---|
13cc0ce18c41a1f55d5eb3eca5603d71_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
iswctype
_lfind
ILFindLastID
_wcsupr
ImmGetAppCompatFlags
CheckEscapesA
ImmWINNLSEnableIME
ILCombine
ImmGetCandidateListCountA
ImmDisableIME
PifMgr_SetProperties
_CIsqrt
strtoul
GetFileNameFromBrowse
ImmGetIMCCLockCount
sin
mbstowcs
_chkstk
_wcsicmp
towupper
strchr
ImmSetOpenStatus
isalnum
ExtractIconResInfoA
iswlower
_memicmp
qsort
isgraph
iswspace
ImmUnlockIMC
ImmReleaseContext
ExtractAssociatedIconA
ImmPutImeMenuItemsIntoMappedFile
OpenThread
VirtualQueryEx
RtlMoveMemory
GetThreadLocale
CreateFileMappingW
CreateFileMappingA
lstrcmpiA
MapViewOfFile
UnmapViewOfFile
IsProcessorFeaturePresent
WaitForMultipleObjects
ExitProcess
CreateProcessNotify
lprping
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ