RMACreateInstance
RMACreateSecurityInstance
RMAShutdown
Static task
static1
Behavioral task
behavioral1
Sample
2e5582d7be06f27a2146e63970bbe4c5_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2e5582d7be06f27a2146e63970bbe4c5_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
2e5582d7be06f27a2146e63970bbe4c5_JaffaCakes118
Size
44KB
MD5
2e5582d7be06f27a2146e63970bbe4c5
SHA1
1953d37062629a1bd172ae79c3fdded3f36b4356
SHA256
7b175c83a0200800909c7ffa7f4da92830cd823a41f39244103ca5ba672bfc3b
SHA512
e301a6e25b4d4efc6c336df86745b94e2b418ee33c7f700212b7027a6ce5d3e15f7588b374abe38d2ae559415264be2bde9e442ff83eed49274994181314759f
SSDEEP
384:jvtA7dN3IbNzU+YLTfpEgFAv7RhyoyYm0NaVqcFs4bU7:OT3I5z1yrAv7+huJcNs
Checks for missing Authenticode signature.
resource |
---|
2e5582d7be06f27a2146e63970bbe4c5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_initterm
_adjust_fdiv
malloc
??2@YAPAXI@Z
free
_assert
rand
??3@YAXPAX@Z
_purecall
CreateFileA
WriteFile
CloseHandle
LoadResource
GetModuleHandleA
GetLastError
InterlockedDecrement
InterlockedIncrement
ReadFile
DisableThreadLibraryCalls
FindResourceA
CryptDecrypt
CryptGenRandom
CryptGetKeyParam
CryptGetProvParam
RegOpenKeyA
RegQueryValueExA
RegCloseKey
CryptCreateHash
CryptHashData
CryptImportKey
CryptSetKeyParam
CryptExportKey
CryptAcquireContextA
CryptEncrypt
CryptReleaseContext
CryptGetHashParam
CryptGetUserKey
CryptGenKey
CryptDestroyKey
RMACreateInstance
RMACreateSecurityInstance
RMAShutdown
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE