RMACreateInstance
RMAShutdown
Static task
static1
Behavioral task
behavioral1
Sample
850aa9b3d165643b5dee9ebd4844558e_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
850aa9b3d165643b5dee9ebd4844558e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
850aa9b3d165643b5dee9ebd4844558e_JaffaCakes118
Size
216KB
MD5
850aa9b3d165643b5dee9ebd4844558e
SHA1
f957edc91e5b1a3c90d684c35c6161b6829f453b
SHA256
21dbef3c8a1945a9a3e538cffcc20e67fe341b5a7a9363fd50c9d96b901ffa0b
SHA512
0cf339b7c13b68c92e07d453a59935622b35461591747375627e89b95e790f65f788a4a77d1f19ffa9034538272be2021c8bd114733572140c9991b01c0bb97c
SSDEEP
3072:+RS7LvKAY5KLTJc0fHKiQzJqlpQmrr8maOvgLRjbvtORQdx/7W9:JLvK6cmHFUmp5IjbvtMKE
Checks for missing Authenticode signature.
resource |
---|
850aa9b3d165643b5dee9ebd4844558e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
free
_initterm
_adjust_fdiv
??3@YAXPAX@Z
_onexit
realloc
malloc
strncpy
_strnicmp
_ftol
iscntrl
isspace
??2@YAPAXI@Z
strstr
_purecall
__dllonexit
_strcmpi
DisableThreadLibraryCalls
GetSystemDirectoryA
LoadLibraryA
GetProcAddress
FreeLibrary
RMACreateInstance
RMAShutdown
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ