I_RpcMapWin32Status
RpcMgmtSetServerStackSize
RpcMgmtStopServerListening
RpcMgmtWaitServerListen
RpcServerListen
RpcServerRegisterIf
RpcServerUnregisterIf
RpcServerUnregisterIfEx
RpcServerUseProtseqEpW
_vscprintf
Static task
static1
Behavioral task
behavioral1
Sample
0bf89730fc9ed024425d036a0a0e8caa_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0bf89730fc9ed024425d036a0a0e8caa_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0bf89730fc9ed024425d036a0a0e8caa_JaffaCakes118
Size
96KB
MD5
0bf89730fc9ed024425d036a0a0e8caa
SHA1
7c1184d4761b54e46e9f751521ad8fd2f5f6f34a
SHA256
9c1906dc0eee1ef6480dcab6d07b4d202ce18289eb1ef9879c37de9fddce70ca
SHA512
198081bb49c87f089e056328f947f824949f773711e3e63637b954d7c742d2516eade1af47768d42e4ca4636e21212fee696e323b4f1ee7b04131a6bc9002117
SSDEEP
1536:AqvBzmdsfnMJWFtFQMHdy41ZtCwSWw4XCtWh/:AqvjntKoZAzo
Checks for missing Authenticode signature.
resource |
---|
0bf89730fc9ed024425d036a0a0e8caa_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
I_RpcMapWin32Status
RpcMgmtSetServerStackSize
RpcMgmtStopServerListening
RpcMgmtWaitServerListen
RpcServerListen
RpcServerRegisterIf
RpcServerUnregisterIf
RpcServerUnregisterIfEx
RpcServerUseProtseqEpW
_vscprintf
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE