CreateProcessNotify
dfrgiles
Static task
static1
Behavioral task
behavioral1
Sample
13e9dc36fd196fef3b2135c6ca375387_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
13e9dc36fd196fef3b2135c6ca375387_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
13e9dc36fd196fef3b2135c6ca375387_JaffaCakes118
Size
58KB
MD5
13e9dc36fd196fef3b2135c6ca375387
SHA1
7bf31823ab220833b138df20d79f27ff31f57622
SHA256
cc7be237993af00d7f34ef3abb4e2c78481c5fb38fb3c6c808bb354ddb35a64d
SHA512
c2bc934ad149c489c0e63e972f423349eca1343ae90cb32b5022ecce12bf11e42fecea93c0e52cb817a5ce101c8ea67981b4be56aa70d25a87857d0ac7a13573
SSDEEP
1536:HD2V5b9oFrtautYiy23UetnIDJX9oTnh/hamE:HDub9ctaYkeniJcphD
Checks for missing Authenticode signature.
resource |
---|
13e9dc36fd196fef3b2135c6ca375387_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_LDscale
_Exp
_Tolower
_Inf
_FDscale
_LExp
_Hugeval
_Getctype
_LRteps
_LEps
_Strcoll
_LSnan
_FDnorm
_LSinh
_Xbig
_Cosh
ReadFile
WaitForMultipleObjects
IsBadReadPtr
VirtualAlloc
lstrlenA
VirtualLock
lstrcpyA
GetModuleHandleA
GetPriorityClass
CloseHandle
FindFirstFileA
UnmapViewOfFile
CreatePipe
GlobalLock
WriteFile
lstrlenW
SetPriorityClass
VirtualFree
GlobalAlloc
VirtualQuery
TerminateProcess
SetFileAttributesA
SetEndOfFile
DeleteFileA
FindNextFileA
GetCurrentThread
CreateFileA
OutputDebugStringA
VirtualProtectEx
GetVersion
FindClose
CopyFileA
Sleep
WritePrivateProfileStructA
GetPrivateProfileStringA
MapViewOfFile
IsProcessorFeaturePresent
VirtualUnlock
SetCurrentDirectoryA
WaitForSingleObject
GetFileSize
GetStartupInfoA
GetModuleFileNameA
VirtualQueryEx
CreateFileMappingA
SetFilePointer
GlobalUnlock
ImageList_Destroy
LoadCursorA
SendMessageA
IsZoomed
EndDialog
wvsprintfA
GetParent
DestroyIcon
GetClipboardData
SetFocus
DestroyCursor
SetWindowLongA
SetClipboardData
GetDlgItem
ShowWindow
EnableWindow
GetClassInfoA
GetActiveWindow
CheckMenuRadioItem
GetAsyncKeyState
MoveWindow
SetWindowPos
SetClassLongA
GetCursorPos
IsIconic
SendDlgItemMessageA
SetMenuItemInfoA
GetWindowDC
ScreenToClient
CharLowerA
CharUpperA
OpenClipboard
EmptyClipboard
MessageBeep
gmtime
malloc
toupper
_timezone
realloc
strstr
free
DeleteObject
SetTextColor
LookupPrivilegeValueA
RegSetValueExA
AdjustTokenPrivileges
OpenProcessToken
RegCreateKeyExA
DragQueryFileA
DragAcceptFiles
BindImageEx
CheckSumMappedFile
ImageRvaToSection
CreateProcessNotify
dfrgiles
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ