RARCloseArchive
RAROpenArchiveEx
RARProcessFile
RARReadHeaderEx
RARSetCallback
getVersion
Static task
static1
Behavioral task
behavioral1
Sample
e097015a642fdfe925f5ed76e2cbcebf_JaffaCakes118.dll
Resource
win7-20240708-en
Target
e097015a642fdfe925f5ed76e2cbcebf_JaffaCakes118
Size
258KB
MD5
e097015a642fdfe925f5ed76e2cbcebf
SHA1
9ffb88f0ec1da375514aa2a651cd9913f7bd50b3
SHA256
49224989309e40316035c65ce61043cd6e3594ff096bcc631aa721f10a859fbf
SHA512
29e2b3f31e2cc6b6fbfffece8c7d2d78bf5ba1893793674a82c8350b15ca3cec42c166c6f9487354b1fe47c889c1a2a02971d9e01cafb097b63f46032bfb9cb7
SSDEEP
6144:c2OMrnQb6eJxq+Uyc518UWq9XT3JLqaSw90Hn6d:BO6Q2eLw9jZLqaEH2
Checks for missing Authenticode signature.
resource |
---|
e097015a642fdfe925f5ed76e2cbcebf_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sleep
CreateFileW
CreateFileA
GetLastError
CloseHandle
FlushFileBuffers
GetStdHandle
WriteFile
ReadFile
SetFilePointer
SetEndOfFile
GetFileType
GetVersionExA
WideCharToMultiByte
MultiByteToWideChar
GetCPInfo
IsDBCSLeadByte
HeapFree
HeapAlloc
HeapReAlloc
GetModuleHandleW
GetProcAddress
ExitProcess
GetCurrentThreadId
GetCommandLineA
HeapCreate
HeapDestroy
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
GetModuleFileNameA
RaiseException
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
LCMapStringA
LCMapStringW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
LoadLibraryA
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
RtlUnwind
HeapSize
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CharUpperA
OemToCharA
RARCloseArchive
RAROpenArchiveEx
RARProcessFile
RARReadHeaderEx
RARSetCallback
getVersion
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE