RMACreateInstance
RMAShutdown
SetDLLAccessPath
Static task
static1
Behavioral task
behavioral1
Sample
272a24b73b7c6914e33a96751f266775_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
272a24b73b7c6914e33a96751f266775_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
272a24b73b7c6914e33a96751f266775_JaffaCakes118
Size
108KB
MD5
272a24b73b7c6914e33a96751f266775
SHA1
958e12f0d772d713d9a786e5f2189fa21e02b154
SHA256
790e1cc1825134a0c5e4f74515857f3e73ad3c5707e44432f3d47d62dd96f28d
SHA512
ebf5d6a28401fc75634df049ac74078a759cbd4cf7bb8102c25bd270f84c4b79373de456e5ee02d6f9c44c9b42c04c3a72b2dbe2522bffd45aa1d62ba1d73c50
SSDEEP
1536:+UYhuh/TWsnn7vUXTC94aRynHTAdoK3lXbr3xrrWgdSgURV3Q3tprF:+y7vUHCW0SgA3Q3t
Checks for missing Authenticode signature.
resource |
---|
272a24b73b7c6914e33a96751f266775_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_onexit
rand
__dllonexit
strncpy
sscanf
??3@YAXPAX@Z
_purecall
_telli64
_lseeki64
_chsize
_fstat
_errno
_mbctype
strstr
strchr
memmove
_ismbcspace
_vsnprintf
realloc
free
malloc
_stricmp
strrchr
sprintf
strtok
atoi
atol
_snprintf
isspace
_initterm
_adjust_fdiv
??2@YAPAXI@Z
_creat
_open
_unlink
_write
printf
_putenv
_close
_tell
_sopen
_lseek
_read
CharLowerA
GetSystemMetrics
CharNextA
GetSystemInfo
CreateFileA
GetFileSize
GetLastError
CloseHandle
LoadLibraryA
GetProcAddress
FreeLibrary
GetEnvironmentVariableA
GetModuleFileNameA
MulDiv
FindResourceA
LoadResource
LockResource
SizeofResource
InterlockedIncrement
InterlockedDecrement
UnmapViewOfFile
MapViewOfFile
SetErrorMode
CreateFileMappingA
GetTempFileNameA
GetTempPathA
RMACreateInstance
RMAShutdown
SetDLLAccessPath
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE