RtvEBlockQuery
RtvEDestroy
RtvEncodeBlock
RtvEncodeCreate
Static task
static1
Behavioral task
behavioral1
Sample
16001725169ca21396b2b16ababbf08a_JaffaCakes118.dll
Resource
win7-20240903-en
Target
16001725169ca21396b2b16ababbf08a_JaffaCakes118
Size
188KB
MD5
16001725169ca21396b2b16ababbf08a
SHA1
0cf98dae59054dbe17ce52d0a9dca136367c9881
SHA256
d20a579372296b75b32ccf99834bead302951598eb209df5e4e073924cffb875
SHA512
c6e3223d0db321acc07ce9d01df57d06e23d9142e8dad4be02dcc1c247403244d908aad70ef67aa57cb0b5a747fe6f677dd232801593067278793bbb6fcc6013
SSDEEP
3072:4FVd8No9EzfVakCpIUZV+NInROITg2b+lXbqWokZc:4HdEaEzfHOjRO2b+JqWO
Checks for missing Authenticode signature.
resource |
---|
16001725169ca21396b2b16ababbf08a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_adjust_fdiv
free
malloc
_initterm
DisableThreadLibraryCalls
RtvEBlockQuery
RtvEDestroy
RtvEncodeBlock
RtvEncodeCreate
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE