CanUnload
RMACreateInstance
RMAShutdown
Static task
static1
Behavioral task
behavioral1
Sample
7254569d656f8b58cce04f771ff5782f_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
7254569d656f8b58cce04f771ff5782f_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
7254569d656f8b58cce04f771ff5782f_JaffaCakes118
Size
172KB
MD5
7254569d656f8b58cce04f771ff5782f
SHA1
15ce04d6fc11705e212942c3f13faaae65334d28
SHA256
1a1647960100d1081bba4d658a8c348b74cc08b67c7b0d4e4f65f7da9f0b896f
SHA512
2dc54a470c5191cb35135d635a9659c00c22d8628198bae30ef4cf453e1e064977d05f7aa1cee1508173e25a59beee959490e7ac09e1127f3351fe3ddeb681fc
SSDEEP
3072:RZSW49HYQ0VLyZpfEebw4Si7gwgCDkKx0URNH/96qmGiC+bJQuoDwp5HDSeS:RANeLyHEAw4Si7gwgCDkKxL/liZYwi
Checks for missing Authenticode signature.
resource |
---|
7254569d656f8b58cce04f771ff5782f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
isalnum
islower
isdigit
isalpha
_onexit
_initterm
_adjust_fdiv
_mbctype
realloc
isxdigit
tolower
_vsnprintf
??3@YAXPAX@Z
isupper
_findclose
_chsize
_findnext
_findfirst
strtok
_fstat
_errno
iscntrl
getenv
__CxxFrameHandler
strspn
strchr
isspace
ctime
fflush
fread
malloc
fprintf
calloc
sscanf
remove
strncpy
strstr
strncmp
free
fopen
strtol
memmove
_stricmp
fwrite
fclose
strrchr
_strnicmp
atol
_purecall
atoi
time
__dllonexit
??2@YAPAXI@Z
_strcmpi
_tell
_read
_write
_lseek
_sopen
_open
_creat
_close
_stat
_getcwd
_chdir
_unlink
FreeLibrary
LocalFileTimeToFileTime
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetTempPathA
CreateFileA
GetFileSize
GetTempFileNameA
MapViewOfFile
GetLastError
CreateFileMappingA
GetSystemInfo
MoveFileA
UnmapViewOfFile
SetFileAttributesA
FindNextFileA
GetFileAttributesA
GetDriveTypeA
FindFirstFileA
RemoveDirectoryA
GetWindowsDirectoryA
FindClose
CreateDirectoryA
CloseHandle
ReleaseMutex
DeleteFileA
WaitForSingleObject
LoadLibraryA
CreateMutexA
GetModuleHandleA
GetTickCount
GetDiskFreeSpaceA
DisableThreadLibraryCalls
GetModuleFileNameA
GetProcAddress
CharNextA
GetSystemMetrics
CharPrevA
CanUnload
RMACreateInstance
RMAShutdown
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE