RtvDBlockQuery
RtvDDestroy
RtvDecodeBlock
RtvDecodeCreate
Static task
static1
Behavioral task
behavioral1
Sample
3ae0ea33b1e798ee90f31b199d051382_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3ae0ea33b1e798ee90f31b199d051382_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3ae0ea33b1e798ee90f31b199d051382_JaffaCakes118
Size
112KB
MD5
3ae0ea33b1e798ee90f31b199d051382
SHA1
f42c8c7f2b90e7289c203184d59626c93464f4ce
SHA256
c6e0fa9307707405508893f637e50fc89565e697e049e9e26617506e98b09148
SHA512
77e106200077a5a2e27b16624c8b71319aaadbdcca8a385ba09343559ba42ff7f8130ee6ef2f720f93cb5fd8218d07146c6ed45bed231a7beb99071c71db671c
SSDEEP
1536:E6lIdSDpfNpH2pc9fTza9rGFVgbe63IXcv0j0ilWlhLSUE+fNu:IdSdfDf9rOrgVgy63IXJ04ESQ1u
Checks for missing Authenticode signature.
resource |
---|
3ae0ea33b1e798ee90f31b199d051382_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_adjust_fdiv
free
malloc
_initterm
DisableThreadLibraryCalls
RtvDBlockQuery
RtvDDestroy
RtvDecodeBlock
RtvDecodeCreate
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE