RtvEBlockQuery
RtvEDestroy
RtvEncodeBlock
RtvEncodeCreate
Static task
static1
Behavioral task
behavioral1
Sample
0ff09f374cdab927fcb1745237943c6d_JaffaCakes118.dll
Resource
win7-20240508-en
Target
0ff09f374cdab927fcb1745237943c6d_JaffaCakes118
Size
104KB
MD5
0ff09f374cdab927fcb1745237943c6d
SHA1
e545ba440733088b12f7d62273e7b2e82ba3f8af
SHA256
f83ceacc2db5a00a91af105fa593e483d251106117f63f8a517f06a4ad229f9e
SHA512
395fb095bc76e614abb4ced8851b5287e36d4c583639bd20d6b52fe6b76cc5a6f063660acd4b87be34b86bd0ca4d71d4bc5e7cdae409a6f50e510e6dfaef5458
SSDEEP
1536:EFb/gIdEvnFbOaE/CCVD2DophGdE45fIJLYOMvedtYYBhp1:EFVd8nllE/CEp149IGNedtY6p1
Checks for missing Authenticode signature.
| resource |
|---|
| 0ff09f374cdab927fcb1745237943c6d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_adjust_fdiv
free
malloc
_initterm
DisableThreadLibraryCalls
RtvEBlockQuery
RtvEDestroy
RtvEncodeBlock
RtvEncodeCreate
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE