CreateProcessNotify
autoycfg
Static task
static1
Behavioral task
behavioral1
Sample
16440154ffbc8503594ef7420b93c176_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
16440154ffbc8503594ef7420b93c176_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
16440154ffbc8503594ef7420b93c176_JaffaCakes118
Size
47KB
MD5
16440154ffbc8503594ef7420b93c176
SHA1
c663fb3c7e68a08106d305c6c1e09b077a6b0eb0
SHA256
dbad4ce01e4fe764409829275a06c8f289d8986e54b08757df846319a4775e9d
SHA512
5e640a5f6396bf95b06fcb2a5ec31c628dd4e513e1bf5c5bf34eb7af8d9764d492ec5e7a5c47145946fbc9b2270b0fa663180ae96102f30eaec7e8353aef1dd8
SSDEEP
768:UhidWKPv/JsdkkD+uN5/22ePrRpQaqjsr8SDUdPVzyL8JfL30F:UcdXv/JsXDf5OxRxqjsr8tdPVmLoDEF
Checks for missing Authenticode signature.
resource |
---|
16440154ffbc8503594ef7420b93c176_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
UnmapViewOfFile
GetEnvironmentStringsA
GetStringTypeExA
CreateThread
ReadFile
FreeEnvironmentStringsA
MapViewOfFile
SetThreadExecutionState
SetFilePointerEx
WriteFile
WaitForMultipleObjects
CreateFileMappingA
PostQueuedCompletionStatus
SetFilePointer
GetModuleHandleA
GetQueuedCompletionStatus
OpenThread
SetThreadPriorityBoost
RtlMoveMemory
lstrcpynA
ExitThread
CreateFileA
GetVersion
InterlockedIncrement
GetSystemTimeAsFileTime
lstrcatA
CreateIoCompletionPort
InterlockedDecrement
VirtualQuery
GetCurrentProcessId
PathIsExe
DragQueryFileA
SdbGetStandardDatabaseGUID
ImmReSizeIMCC
ImmActivateLayout
ReadCabinetState
ILCloneFirst
PathQualify
CtfAImmDeactivate
FreeIconList
CtfImmEnterCoInitCountSkipMode
SdbResolveDatabase
ExtractIconA
DAD_SetDragImage
ImmWINNLSEnableIME
DAD_AutoScroll
ImmGetCompositionFontA
RegenerateUserEnvironment
ShimDumpCache
ImmSendIMEMessageExA
ExtractAssociatedIconExA
ImmSetCompositionWindow
SdbTagRefToTagID
ILFree
SdbReadDWORDTag
ImmDisableIME
CreateProcessNotify
autoycfg
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ