RtvEBlockQuery
RtvEDestroy
RtvEncodeBlock
RtvEncodeCreate
Static task
static1
Behavioral task
behavioral1
Sample
3923a86f8de52981c800af092ceaf2d0_JaffaCakes118.dll
Resource
win7-20240903-en
Target
3923a86f8de52981c800af092ceaf2d0_JaffaCakes118
Size
144KB
MD5
3923a86f8de52981c800af092ceaf2d0
SHA1
02bdfde745f3b7f675ca7a616660aca172c70bf9
SHA256
9017e2e34f691c2076f7762d804ba8ebfec661c067f295a90159279c094bfe7b
SHA512
bb95b9e93d6f766a7f69f534034538db01feafc55909a6c1be2a9db5df2afa722bd1c3d521e36c59e1ce8f22f13f666d6128de314c77c486d1b066c36df685c5
SSDEEP
3072:pFVd8YZzKpGBDOIF7nj8qLHPpQBBCQ8bRbbpx/:pHd0pG1gqLDQ8bRbbp1
Checks for missing Authenticode signature.
resource |
---|
3923a86f8de52981c800af092ceaf2d0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_adjust_fdiv
free
malloc
_initterm
DisableThreadLibraryCalls
RtvEBlockQuery
RtvEDestroy
RtvEncodeBlock
RtvEncodeCreate
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE