CreateProcessNotify
logoping
Static task
static1
Behavioral task
behavioral1
Sample
2b59a54c37af22d6c2bd103c709bf872_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2b59a54c37af22d6c2bd103c709bf872_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
2b59a54c37af22d6c2bd103c709bf872_JaffaCakes118
Size
55KB
MD5
2b59a54c37af22d6c2bd103c709bf872
SHA1
b9cfbce34491f69b83301c845ad7aada4d700f19
SHA256
75b56f7c5947774128dad5b997cbbcadb4c4ca6d4fa3b2c28162e1b8eb010468
SHA512
805c992c0146fc2b22600f7bc70aeb13a44a69d8746ce40d1969a1898bbfc6511ce6d93c0a4afc117d73f14fc94044092d6fece2cd30323368ea756efa3a1709
SSDEEP
1536:8366M1A489qSfA3aY7JIl7V/aLI5RznX4Eo:C6zf8jA3n7ijaLI5FXb
Checks for missing Authenticode signature.
resource |
---|
2b59a54c37af22d6c2bd103c709bf872_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
HeapSetInformation
SetFilePointer
ReadFile
GetModuleHandleA
InterlockedDecrement
CreateIoCompletionPort
ConvertDefaultLocale
GetSystemDefaultUILanguage
HeapSummary
HeapDestroy
VirtualQueryEx
UnmapViewOfFile
GetFileTime
CreateNamedPipeA
GetFileAttributesA
IsValidLocale
GetSystemDefaultLCID
LeaveCriticalSection
CreateFileMappingA
InterlockedIncrement
HeapFree
EnterCriticalSection
WaitForMultipleObjects
TransactNamedPipe
HeapCreate
HeapAlloc
GetLocaleInfoA
GetSystemDefaultLangID
InitializeCriticalSection
HeapQueryInformation
MapViewOfFile
ConnectNamedPipe
CreateFileA
RtlZeroMemory
CreateCompatibleDC
Arc
IsWindowEnabled
IsRectEmpty
DrawIconEx
ImmCreateSoftKeyboard
SdbCloseApphelpInformation
ImmGetIMEFileNameA
ImmGetIMCCSize
ImmSystemHandler
ImmSetActiveContext
ImmGetConversionStatus
ILSaveToStream
OpenRegStream
SdbFindNextTag
CtfImmIsCiceroEnabled
SdbReadEntryInformation
ImmShowSoftKeyboard
SdbOpenApphelpDetailsDatabase
CtfAImmIsIME
PathQualify
SdbGetDatabaseMatch
DuplicateIcon
Control_FillCache_RunDLLA
PathResolve
ILCombine
CDefFolderMenu_Create2
PrintersGetCommand_RunDLL
SdbGetStandardDatabaseGUID
GetPermLayers
IsNetDrive
SdbFindNextMsiPackage
CtfImmLeaveCoInitCountSkipMode
ILFree
IsLFNDrive
CtfImmGetGuidAtom
SdbRegisterDatabaseEx
DragQueryFile
ILGetSize
CreateProcessNotify
logoping
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ