CanUnload
RMACreateInstance
RMAShutdown
Static task
static1
Behavioral task
behavioral1
Sample
12c5c3ff1574884578b56981b1e69db1_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
12c5c3ff1574884578b56981b1e69db1_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
12c5c3ff1574884578b56981b1e69db1_JaffaCakes118
Size
236KB
MD5
12c5c3ff1574884578b56981b1e69db1
SHA1
2e64f395059441befc989a0ec624a848f39a58ab
SHA256
b16ccd36be413d2b1f96ba65deaf290b21998a3f14fc6c7e2f61f306cceb798e
SHA512
72736a399563ccddfd13997024a02f2c58dadf0be37d4a072c77c565f15ae1cdf2046ff7ff6fe8845d32e2aeaf6fdaab02cce1e73e60b4ecf7c3e3b23f90d0fd
SSDEEP
6144:3ANeLyHEAw4Si7gwgCDkKxL/liZYwilsnbfnB2L:3ae2HEAOwgCDkKxL/MZ5ilQbfK
Checks for missing Authenticode signature.
resource |
---|
12c5c3ff1574884578b56981b1e69db1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
isalnum
islower
isdigit
isalpha
_onexit
_initterm
_adjust_fdiv
_mbctype
realloc
isxdigit
tolower
_vsnprintf
??3@YAXPAX@Z
isupper
_findclose
_chsize
_findnext
_findfirst
strtok
_fstat
_errno
iscntrl
getenv
__CxxFrameHandler
strspn
strchr
isspace
ctime
fflush
fread
malloc
fprintf
calloc
sscanf
remove
strncpy
strstr
strncmp
free
fopen
strtol
memmove
_stricmp
fwrite
fclose
strrchr
_strnicmp
atol
_purecall
atoi
time
__dllonexit
??2@YAPAXI@Z
_strcmpi
_tell
_read
_write
_lseek
_sopen
_open
_creat
_close
_stat
_getcwd
_chdir
_unlink
FreeLibrary
LocalFileTimeToFileTime
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetTempPathA
CreateFileA
GetFileSize
GetTempFileNameA
MapViewOfFile
GetLastError
CreateFileMappingA
GetSystemInfo
MoveFileA
UnmapViewOfFile
SetFileAttributesA
FindNextFileA
GetFileAttributesA
GetDriveTypeA
FindFirstFileA
RemoveDirectoryA
GetWindowsDirectoryA
FindClose
CreateDirectoryA
CloseHandle
ReleaseMutex
DeleteFileA
WaitForSingleObject
LoadLibraryA
CreateMutexA
GetModuleHandleA
GetTickCount
GetDiskFreeSpaceA
DisableThreadLibraryCalls
GetModuleFileNameA
GetProcAddress
CharNextA
GetSystemMetrics
CharPrevA
CanUnload
RMACreateInstance
RMAShutdown
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE