DpxCheckJobExists
DpxCheckJobExistsEx
DpxDeleteJob
DpxDeleteJobEx
DpxFreeMemory
DpxNewJob
DpxNewJobEx
DpxRestoreJob
DpxRestoreJobEx
DpxRestoreOrNewJob
DpxRestoreOrNewJobEx
Static task
static1
Behavioral task
behavioral1
Sample
9b736eaf2c05ce53035ffd01e89966ec_JaffaCakes118.dll
Resource
win7-20240903-en
Target
9b736eaf2c05ce53035ffd01e89966ec_JaffaCakes118
Size
908KB
MD5
9b736eaf2c05ce53035ffd01e89966ec
SHA1
c80b5109d5996dec0d4764b3a8524a2f82af1cde
SHA256
cae5ab2ba8aa12b42c216e1d1b3efb016a89826e07e1bba5213e6ede4fb11a00
SHA512
86c87851b5fe98215ab9d835139626c297522761daeb5f753cc998172e36275ceebd997b0f6a6b59da2ec42a8223ab86dfceafbf58ecb3dd6f8a1359df1cd00a
SSDEEP
24576:QKfE4IeyDiRhMnFKO2pS9BDrFYA7CKW5:d3yDiRhYF22B57i5
Checks for missing Authenticode signature.
Processes:
resource |
---|
9b736eaf2c05ce53035ffd01e89966ec_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
glMap2f
ConvertDefaultLocale
FindFirstVolumeMountPointW
FreeEnvironmentStringsA
ClearCommBreak
ReadConsoleOutputA
GetBinaryTypeA
PathIsUNCServerShareW
SHQueryInfoKeyW
StrDupA
PathSkipRootW
UrlCombineW
SetTokenInformation
SetServiceObjectSecurity
OpenSCManagerW
AbortSystemShutdownA
CreateServiceA
GetTcpStatistics
GetRTTAndHopCount
UnenableRouter
AVIFileExit
ICDecompress
fputc
CoGetCurrentLogicalThreadId
DsEnumerateDomainTrustsW
NetGroupAddUser
SHPathPrepareForWriteW
GetStretchBltMode
SetMiterLimit
CloseFigure
SetPixelV
SetPaletteEntries
DeleteDC
CopyMetaFileW
GetUrlCacheEntryInfoA
SetupDiGetDriverInfoDetailW
SetupDiDestroyClassImageList
SCardReleaseContext
RpcBindingInqAuthInfoExW
NdrServerCall2
CryptCATHandleFromStore
CryptCATGetCatAttrInfo
ReplyMessage
VkKeyScanA
EnumDisplayDevicesA
AnyPopup
CallWindowProcA
waveOutGetVolume
midiOutCachePatches
DpxCheckJobExists
DpxCheckJobExistsEx
DpxDeleteJob
DpxDeleteJobEx
DpxFreeMemory
DpxNewJob
DpxNewJobEx
DpxRestoreJob
DpxRestoreJobEx
DpxRestoreOrNewJob
DpxRestoreOrNewJobEx
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ