RMACreateInstance
RMAShutdown
RPCreateInstance
SetDLLAccessPath
Static task
static1
Behavioral task
behavioral1
Sample
738e972c4157e6b0e99c1420c6479f17_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
738e972c4157e6b0e99c1420c6479f17_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
738e972c4157e6b0e99c1420c6479f17_JaffaCakes118
Size
164KB
MD5
738e972c4157e6b0e99c1420c6479f17
SHA1
3883fa292ce4929f9dbd621afbfa97362d55a084
SHA256
40a8c5939d31292f8a2ba4d85780e0086e98ca152c208a9a781914596bb5f461
SHA512
c93a5cfc008a2ad6927dcdde2ab4619fde321b1f495d42dc56bda9dc85d184ba2e60e7a7e06e14fa31a898b187214f81f7fbc0369dc30150f13007c9c6dc30f4
SSDEEP
3072:Fjq5O7DpawoiDb/Lg7knv7b5VxkWrQosZiCS:FpX/5Tb5VtUo+
Checks for missing Authenticode signature.
resource |
---|
738e972c4157e6b0e99c1420c6479f17_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
rand
_stricmp
__dllonexit
_onexit
_initterm
_adjust_fdiv
sprintf
malloc
strrchr
realloc
_ftol
printf
_putenv
_strnicmp
??2@YAPAXI@Z
??3@YAXPAX@Z
_purecall
atof
time
atol
free
strchr
isspace
strtok
_strdup
LoadLibraryA
SetErrorMode
GetProcAddress
InterlockedIncrement
GetEnvironmentVariableA
GetModuleFileNameA
InterlockedDecrement
FreeLibrary
CharPrevA
GetClientRect
CharNextA
GetSystemMetrics
FillRect
InvalidateRect
UpdateWindow
RegisterClassA
CreateWindowExA
ShowWindow
DestroyWindow
BeginPaint
EndPaint
DefWindowProcA
LoadImageA
LoadStringA
LoadBitmapA
CreatePolygonRgn
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
CreateSolidBrush
DeleteObject
FillRgn
CombineRgn
BitBlt
DeleteDC
GetStockObject
RMACreateInstance
RMAShutdown
RPCreateInstance
SetDLLAccessPath
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ