CBTProc
RnaSessGetErrorString
RnaSessInitialize
Static task
static1
Behavioral task
behavioral1
Sample
26ceabfe44b5b8a1dd2074d68bb96fda_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
26ceabfe44b5b8a1dd2074d68bb96fda_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
26ceabfe44b5b8a1dd2074d68bb96fda_JaffaCakes118
Size
36KB
MD5
26ceabfe44b5b8a1dd2074d68bb96fda
SHA1
fb2370fb486ea4dd3404be20291c0793112c05d6
SHA256
a039ed1673fa4d9817b5023b1b87332b28ce2ab0ccec810773eecc9805109f50
SHA512
b476024c8bdf2e12c365d9d3310bddfabdf3746f80ccadd4b34d0cf8a699ace25afb7c25da73b69e870714b588c3f9f98b0a61d6737cccda61f29d524d4ac203
SSDEEP
768:PyhduPmnLMVKG966o9QJvleMBCfnMslv:KhKTVo6o6JoMAfnMs
Checks for missing Authenticode signature.
resource |
---|
26ceabfe44b5b8a1dd2074d68bb96fda_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrcpynA
CloseHandle
CreateThread
lstrlenA
CreateEventA
lstrcmpiA
SetEvent
ExitThread
WaitForSingleObject
lstrcpyA
LocalFree
LocalAlloc
CreateProcessA
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
SetCommTimeouts
GetLastError
LoadLibraryA
lstrcatA
GetSystemDirectoryA
ReadFile
GetTickCount
WriteFile
Sleep
CreateFileA
GetModuleFileNameA
GetModuleHandleA
FreeLibrary
GetSystemTime
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
RtlUnwind
GetProcAddress
GetCommTimeouts
lstrcmpA
FlushFileBuffers
PostMessageA
EnumThreadWindows
wsprintfA
LoadStringA
wvsprintfA
UnhookWindowsHookEx
SetWindowsHookExA
GetWindowTextA
ShowWindow
SendMessageA
CallNextHookEx
RnaTerminate
RnaGetDevicePort
RnaComplete
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
CBTProc
RnaSessGetErrorString
RnaSessInitialize
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ