CreateProcessNotify
dvduhelp
Static task
static1
Behavioral task
behavioral1
Sample
3a0c8132469e62192b5f4912e865607d_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3a0c8132469e62192b5f4912e865607d_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
3a0c8132469e62192b5f4912e865607d_JaffaCakes118
Size
51KB
MD5
3a0c8132469e62192b5f4912e865607d
SHA1
04793a0e5b80e1e6c3635cb10102ee29eb7e266f
SHA256
c7e6b8e2bd499fa57a2d2a706cf92d5d14b2279d02cd67cca9327a325f1c59bf
SHA512
7a8ee6af890b6a8a974a5f2fff4a696a31ba036b67d0a8a034df043ba761322e942a46b30028eb45432316844ddcb531682b23e8f39980a8226e379230b8b955
SSDEEP
768:2lLbARiixYccUr0QPDmC51Eq1VAPKk48TPLH3AFhy3zh2l32IGVXfEKtny1CyQti:Mk9xwcD72dP7d3bIeXfPtnp7
Checks for missing Authenticode signature.
resource |
---|
3a0c8132469e62192b5f4912e865607d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateThread
HeapAlloc
WriteFile
IsProcessorFeaturePresent
WaitForSingleObjectEx
ExitProcess
CreateFileMappingA
MapViewOfFile
VirtualQuery
SuspendThread
ReadFile
UnmapViewOfFile
MapViewOfFileEx
ConnectNamedPipe
HeapFree
SetFilePointer
HeapReAlloc
FreeEnvironmentStringsA
CreateFileA
SleepEx
WaitNamedPipeA
CreateEventA
GetEnvironmentStringsA
WaitForMultipleObjects
_ltoa
ImmConfigureIMEA
ImmProcessKey
_CIsqrt
ImmIsUIMessageA
DllCanUnloadNow
ImmSetActiveContext
_wcsnicmp
ILFindLastID
atoi
ImmAssociateContext
ILRemoveLastID
ImmEnumInputContext
iswlower
_chkstk
isxdigit
ImmGetDefaultIMEWnd
CreateProcessNotify
dvduhelp
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ