CreateProcessNotify
caclad32
Static task
static1
Behavioral task
behavioral1
Sample
417ffb433f03a5a1a90c041e29358887_JaffaCakes118.dll
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
417ffb433f03a5a1a90c041e29358887_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
417ffb433f03a5a1a90c041e29358887_JaffaCakes118
Size
64KB
MD5
417ffb433f03a5a1a90c041e29358887
SHA1
5314769124ff33c547b790d2e665ae170ed3082d
SHA256
ecfc2614c23b2457ee049ba64ca23c09fe677f0cbeac55e19fc4f1311beedcbc
SHA512
19ef4d5308a2094ead516df69153bcbe1e8f26e58a11a55f633330fd3828b8a8b6620c3199dbfb8ec3912fe0cc3a7682c46c41d64eb3d9f5fcfc363b58323f82
SSDEEP
1536:a9I+CWVOZTYrQhYlRzU18k+nY28wQ52djbD4fmxsEXSE:a9IJQOZ8QEa18LY28jQSmWEC
Checks for missing Authenticode signature.
resource |
---|
417ffb433f03a5a1a90c041e29358887_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_Stod
_Wcrtomb
_Mbrtowc
_Sinh
_Snan
_FCosh
_LNan
_LSnan
_LInf
_FExp
_FNan
_Getcvt
_FXbig
_FDenorm
_LXbig
_Dscale
_LSinh
_Stold
_FDnorm
_Denorm
_FEps
_LDenorm
GetPrivateProfileStringA
GetModuleHandleA
TerminateProcess
WritePrivateProfileStructA
WriteFile
FindFirstFileA
VirtualAlloc
GetVersion
GetFileAttributesA
FindNextFileA
lstrcmpiA
GetCurrentProcessId
CloseHandle
UnmapViewOfFile
ReadFile
DeleteFileA
SetEndOfFile
GetFileSize
MapViewOfFile
GetCurrentThread
SetFilePointer
GlobalUnlock
lstrlenW
VirtualQuery
IsProcessorFeaturePresent
WritePrivateProfileStringA
GlobalLock
GetCurrentDirectoryA
lstrcpyA
WaitForMultipleObjects
CreateFileMappingA
GlobalAlloc
CreateFileA
GetProcAddress
SetThreadPriority
CreatePipe
LoadLibraryA
GetPrivateProfileStructA
FindClose
VirtualFree
IsBadReadPtr
IsWindowEnabled
CreatePopupMenu
SetWindowTextA
SetWindowLongA
InvalidateRect
IsIconic
GetClassInfoA
CharLowerA
MessageBeep
CheckMenuRadioItem
DestroyCursor
FindWindowA
GetDlgItemTextA
GetWindowTextA
SetMenuItemInfoA
CharUpperA
wvsprintfA
SetClipboardData
GetWindowRect
KillTimer
DialogBoxParamA
MoveWindow
IsDlgButtonChecked
SetWindowPos
CallWindowProcA
GetActiveWindow
GetSysColorBrush
DestroyMenu
RegCreateKeyExA
RegDeleteKeyA
OpenProcessToken
strstr
_except_handler3
gmtime
_timezone
sprintf
asctime
InitCommonControlsEx
ImageList_Create
ImageList_ReplaceIcon
ImageList_Add
DragFinish
DragQueryFileA
GetSaveFileNameA
DeleteObject
SelectObject
CreateFontIndirectA
GetDeviceCaps
CreateProcessNotify
caclad32
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ