I_RpcMapWin32Status
RpcMgmtSetServerStackSize
RpcMgmtStopServerListening
RpcMgmtWaitServerListen
RpcServerListen
RpcServerRegisterIf
RpcServerUnregisterIf
RpcServerUnregisterIfEx
RpcServerUseProtseqEpW
Static task
static1
Behavioral task
behavioral1
Sample
b137adf606debb7715ebad9f46b8f736_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b137adf606debb7715ebad9f46b8f736_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b137adf606debb7715ebad9f46b8f736_JaffaCakes118
Size
11KB
MD5
b137adf606debb7715ebad9f46b8f736
SHA1
d3315efde75cc6dd7a0334426b20ed4a9f0fbb62
SHA256
4d215e215a7a1f574e0583dc46ab16f14ff3a102e192d8b805f495172c7d666e
SHA512
955296ffea4f030352376ff9a7cfaf16a2b432d354a2e469742270be9eb2fb6e4e19b7fdaf210a5f62754628758bf1b2ef57c197e0a4e75de85bd09657056113
SSDEEP
192:iv5Tclf5GOuCYY7CXNLd0t/vw41E9RGpdzikSpjJ3oI6/Lx1DLx:OcnGOuZ2KwERGy9jJ3D6/L9
Checks for missing Authenticode signature.
resource |
---|
b137adf606debb7715ebad9f46b8f736_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
I_RpcMapWin32Status
RpcMgmtSetServerStackSize
RpcMgmtStopServerListening
RpcMgmtWaitServerListen
RpcServerListen
RpcServerRegisterIf
RpcServerUnregisterIf
RpcServerUnregisterIfEx
RpcServerUseProtseqEpW
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE