RtvDBlockQuery
RtvDDestroy
RtvDecodeBlock
RtvDecodeCreate
Static task
static1
Behavioral task
behavioral1
Sample
1c7b1cb6aaeaa11de0c07f6444552252_JaffaCakes118.dll
Resource
win7-20231129-en
Target
1c7b1cb6aaeaa11de0c07f6444552252_JaffaCakes118
Size
132KB
MD5
1c7b1cb6aaeaa11de0c07f6444552252
SHA1
a6877bdff27d24867e67487c12fb49cb6b585cdc
SHA256
29007594a106c752ee25d486b5125ff426656a48045f605d27717c4b17b802c2
SHA512
7e780ff5bc20e6ab0380c349606830978fedfe4b594410de00d7cb99e61cf1d54326331b4a7e7866cdb2d531e343e70b378701f9c30648c84fa90e93d5abd01e
SSDEEP
1536:46lIdSDpfnB9O3z6bqbTqMTkDr5vrMP1j0t+Mofl7I3kDl:0dSdfB03z6b+kDVDMP1ji+7NMQl
Checks for missing Authenticode signature.
resource |
---|
1c7b1cb6aaeaa11de0c07f6444552252_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_adjust_fdiv
free
malloc
_initterm
DisableThreadLibraryCalls
RtvDBlockQuery
RtvDDestroy
RtvDecodeBlock
RtvDecodeCreate
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE