RtvDBlockQuery
RtvDDestroy
RtvDecodeBlock
RtvDecodeCreate
Static task
static1
Behavioral task
behavioral1
Sample
0fd6e7c396063517b9d82be20437cfcf_JaffaCakes118.dll
Resource
win7-20240903-en
Target
0fd6e7c396063517b9d82be20437cfcf_JaffaCakes118
Size
96KB
MD5
0fd6e7c396063517b9d82be20437cfcf
SHA1
0a3cd77a98e869068954fd2d870b2b64382c6f47
SHA256
d46734e8a732cf0a28b717dd8dae251a71582314923c9cc4cbbe17b0a46e8c48
SHA512
31f633533396ee4bc2231731ceb305249825bdca18c8aeef0ccd00a45f978e6aed00cffcaca0add107346a922f888f6d27fedeb7a1dc232c91638dce68f379ad
SSDEEP
1536:i6lIdSDpfArqe2FeEuWR3YvsEnLD34+9Mz0rtbX01oqtAEfM:2dSdf9nusEnnz94iBIoqtAEU
Checks for missing Authenticode signature.
| resource |
|---|
| 0fd6e7c396063517b9d82be20437cfcf_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_adjust_fdiv
free
malloc
_initterm
DisableThreadLibraryCalls
RtvDBlockQuery
RtvDDestroy
RtvDecodeBlock
RtvDecodeCreate
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE