OnUninstall
RMACreateInstance
SetDLLAccessPath
Static task
static1
Behavioral task
behavioral1
Sample
561c28ba236677365db9687bc6b73687_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
561c28ba236677365db9687bc6b73687_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
561c28ba236677365db9687bc6b73687_JaffaCakes118
Size
160KB
MD5
561c28ba236677365db9687bc6b73687
SHA1
d02ed701e564b0b454042f1c0deae15ea3ca8a23
SHA256
7e3e806547495013a51b684a171d144dff2d9336cf1990518a114ae64b28e10e
SHA512
8d5eb1c718494e499163d90ca9167cbdb73e93c319ecc2ce16b33aaf60147c192209cd273885e594b0e117fc3a7259f2a3feafe8966ec012200706484741b78a
SSDEEP
3072:+NA8wH3QSLR+IxSbAc3gFWL5OvfJx3ojBqoLkk:8A8oAAnSbAcO/voLk
Checks for missing Authenticode signature.
resource |
---|
561c28ba236677365db9687bc6b73687_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_assert
memset
free
realloc
memcpy
_stricmp
memmove
__dllonexit
_onexit
??2@YAPAXI@Z
malloc
_tell
_eof
strncpy
_mbctype
strstr
strrchr
sscanf
rename
_chmod
_errno
getenv
sprintf
strchr
localtime
_purecall
time
srand
rand
??3@YAXPAX@Z
_commit
_adjust_fdiv
_initterm
_close
_getcwd
_lseek
_write
_read
_open
_itoa
_mkdir
_rmdir
_unlink
_chdir
_putenv
_ftime
CoCreateGuid
GetModuleFileNameA
GetDriveTypeA
FindNextFileA
FreeLibrary
GetProcAddress
LoadLibraryA
GetFileAttributesA
CreateDirectoryA
ReleaseMutex
OpenMutexA
CreateMutexA
WaitForSingleObject
CloseHandle
GetTickCount
GetWindowsDirectoryA
GetDiskFreeSpaceA
FindFirstFileA
QueryPerformanceCounter
InterlockedDecrement
FindClose
GetSystemInfo
GetVersionExA
InterlockedIncrement
DeleteFileA
GetVolumeInformationA
CharPrevA
CharNextA
GetSystemMetrics
RegOpenKeyA
RegQueryValueExA
RegCloseKey
OnUninstall
RMACreateInstance
SetDLLAccessPath
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE