RMACreateInstance
RMAShutdown
SetDLLAccessPath
Static task
static1
Behavioral task
behavioral1
Sample
cdf1ee8efdbbf5793c633c61fc0f5609_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
cdf1ee8efdbbf5793c633c61fc0f5609_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
cdf1ee8efdbbf5793c633c61fc0f5609_JaffaCakes118
Size
348KB
MD5
cdf1ee8efdbbf5793c633c61fc0f5609
SHA1
8ed1e38dc599db3a737146293ec69c501f7310df
SHA256
4957f65c0a7a2901daae0463523bba49915e4c749bc1c4a0fa21a17234e3aace
SHA512
a33c1d0f584dfa9d179aa5698d70a8cfb8356e50912474967d6ef9f773b40f78261375cc131687b20333e2248b0ee8d3dff9450d835fcdcd3f48e22b3f31cb84
SSDEEP
6144:/HxHMWGkf1XJa1L5GUaIVaR9YVWKIsgMlp71ZpCDRPEsL:/HxHMWLfAGyaRKgpRxL
Checks for missing Authenticode signature.
resource |
---|
cdf1ee8efdbbf5793c633c61fc0f5609_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
realloc
malloc
free
_mbctype
strrchr
_purecall
_vsnprintf
sprintf
_strlwr
strchr
atoi
strstr
strncpy
??3@YAXPAX@Z
_adjust_fdiv
_initterm
_onexit
__dllonexit
rand
_stricmp
memmove
??2@YAPAXI@Z
_putenv
printf
_strcmpi
_itoa
GetWindowThreadProcessId
IsWindowEnabled
GetParent
RemovePropA
MessageBoxA
ShowCursor
GetWindowRect
GetCursorPos
PtInRect
GetForegroundWindow
FindWindowExA
GetSystemMetrics
CharNextA
CharPrevA
CharLowerA
GetPropA
SetPropA
ClientToScreen
GetActiveWindow
SetActiveWindow
SetWindowLongA
GetWindowLongA
GetWindow
SetWindowPos
SetTimer
KillTimer
CallWindowProcA
SendMessageA
FillRect
InvertRect
EndDialog
SendDlgItemMessageA
DialogBoxParamA
RegCreateKeyA
RegSetValueExA
RegSetValueA
RegQueryValueA
RegEnumKeyExA
RegEnumKeyA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegOpenKeyA
RegOpenKeyExA
RegQueryValueExA
TextOutA
SelectObject
CreateFontA
GetObjectA
GetCurrentObject
GetTextMetricsA
CreateDirectoryA
GetVersionExA
FreeLibrary
LoadLibraryA
GetProcAddress
GetCurrentProcessId
GetCurrentDirectoryA
SetCurrentDirectoryA
FindFirstFileA
GetVersion
GetSystemInfo
SetErrorMode
MultiByteToWideChar
InterlockedDecrement
WideCharToMultiByte
InterlockedIncrement
FindNextFileA
GetFileAttributesA
GetModuleFileNameA
DisableThreadLibraryCalls
RMACreateInstance
RMAShutdown
SetDLLAccessPath
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ