__KeInsertHeadQueue@4
__KeInsertQueue@0
__KeReadStateQueue@4
Static task
static1
Behavioral task
behavioral1
Sample
f2278e66b2eab398d8378a8adbb1c402_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
f2278e66b2eab398d8378a8adbb1c402_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f2278e66b2eab398d8378a8adbb1c402_JaffaCakes118
Size
33KB
MD5
f2278e66b2eab398d8378a8adbb1c402
SHA1
9c56703823ba4fbbfa383bab4c54ae5cdf2de7aa
SHA256
0ec30d6ee334ef6906beda2b7ee41672eca77e7c0fdbc8a15437232fabd37122
SHA512
0bd29a83c19eeeb919847cb0bc8d9f970fb6b29d1ed6cd26a905bc47d283b17cae153c0dd1b2aa0aed995f950cd0f0bde6364142e3cd27835785fdbbe5d3736c
SSDEEP
768:G9sXSUVHKyBA3ZaPr921QiR16AhiZu3aI2pfbTf:G940nZTCiR16U3aI6H
Checks for missing Authenticode signature.
resource |
---|
f2278e66b2eab398d8378a8adbb1c402_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SeLockSubjectContext
SeReleaseSubjectContext
SeCaptureSubjectContext
MmIsDriverVerifying
SeUnlockSubjectContext
VerSetConditionMask
RtlSetDaclSecurityDescriptor
RtlUnicodeStringToAnsiString
RtlInsertElementGenericTableFull
RtlInitString
RtlDeleteElementGenericTable
RtlCompareString
ZwSetEvent
_vsnwprintf
ZwDuplicateObject
RtlFreeAnsiString
RtlCopyString
_wcsrev
RtlEqualString
strrchr
KeTickCount
wcsspn
DbgPrintEx
RtlInitializeGenericTable
memset
__KeInsertHeadQueue@4
__KeInsertQueue@0
__KeReadStateQueue@4
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ