OnUninstall
RMACreateInstance
SetDLLAccessPath
Static task
static1
Behavioral task
behavioral1
Sample
282341b25ab51ec6bf0ab40a42055381_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
282341b25ab51ec6bf0ab40a42055381_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
282341b25ab51ec6bf0ab40a42055381_JaffaCakes118
Size
100KB
MD5
282341b25ab51ec6bf0ab40a42055381
SHA1
7f17c55a8d3e9c0132b949e200318140d125436f
SHA256
b8a44fc90183faed03f3991cb7423ceacf89583f99d5aba5437735ceabeabb83
SHA512
c050139e19f0e78e45191ca5d143f81edae73e31ffed8cc0e43a57b6b96cd94d0585249efbd16e0ce5659ec357f1d04e26d18c0880863efd33b5657fe7934b2d
SSDEEP
1536:9RT9B88wH3QSyQVFDrES7lMIh19DSbA4JYStz5Tg:9NA8wH3QSLR+IxSbAc3g
Checks for missing Authenticode signature.
resource |
---|
282341b25ab51ec6bf0ab40a42055381_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_assert
memset
free
realloc
memcpy
_stricmp
memmove
__dllonexit
_onexit
??2@YAPAXI@Z
malloc
_tell
_eof
strncpy
_mbctype
strstr
strrchr
sscanf
rename
_chmod
_errno
getenv
sprintf
strchr
localtime
_purecall
time
srand
rand
??3@YAXPAX@Z
_commit
_adjust_fdiv
_initterm
_close
_getcwd
_lseek
_write
_read
_open
_itoa
_mkdir
_rmdir
_unlink
_chdir
_putenv
_ftime
CoCreateGuid
GetModuleFileNameA
GetDriveTypeA
FindNextFileA
FreeLibrary
GetProcAddress
LoadLibraryA
GetFileAttributesA
CreateDirectoryA
ReleaseMutex
OpenMutexA
CreateMutexA
WaitForSingleObject
CloseHandle
GetTickCount
GetWindowsDirectoryA
GetDiskFreeSpaceA
FindFirstFileA
QueryPerformanceCounter
InterlockedDecrement
FindClose
GetSystemInfo
GetVersionExA
InterlockedIncrement
DeleteFileA
GetVolumeInformationA
CharPrevA
CharNextA
GetSystemMetrics
RegOpenKeyA
RegQueryValueExA
RegCloseKey
OnUninstall
RMACreateInstance
SetDLLAccessPath
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE