WoyCnwaIhmpk
OgsweglTguefMoyqm
FyeilcVfiuevsZkidrv
Static task
static1
Target
08e2695457dfc47994e51286e749c94d_JaffaCakes118
Size
19KB
MD5
08e2695457dfc47994e51286e749c94d
SHA1
19e089b683a34e192a4b0db26bf258141b1114bd
SHA256
65c4054f6824be27f8e0b1a0aadcd83da916486c50c12840b961c4df64b289e0
SHA512
8e75ed472648be7c83df9a8aa1c09a813e8a0dd197a44db1e44fdd16051b2ae90f89d68192112b570ec7678780e8e23f1f64532e5269f46f8a7e370493b24a79
SSDEEP
384:ajFdk60Gavv7lGHzK05ajGs+NrNMBxUxwlN6Kl4nxihR:ahdk60Ga56ajGPNMBuwCKeG
Checks for missing Authenticode signature.
resource |
---|
08e2695457dfc47994e51286e749c94d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
ExInitializeRundownProtection
ZwQueryInformationProcess
RtlFindLongestRunClear
PsRestoreImpersonation
DbgPrint
CcPrepareMdlWrite
FsRtlInitializeMcb
IoCreateSymbolicLink
RtlAppendUnicodeStringToString
IoReportResourceForDetection
CcGetDirtyPages
FsRtlNotifyFilterChangeDirectory
ExFreePoolWithTag
KeInsertQueueDpc
MmIsAddressValid
FsRtlIsNtstatusExpected
NtDuplicateObject
RtlInt64ToUnicodeString
NtAllocateUuids
strcmp
READ_REGISTER_BUFFER_ULONG
ZwCreateFile
RtlReserveChunk
FsRtlLookupLastLargeMcbEntry
ZwDisplayString
CcPreparePinWrite
KeStackAttachProcess
RtlImageNtHeader
IoWritePartitionTableEx
KdDebuggerEnabled
ExAllocatePool
strchr
WoyCnwaIhmpk
OgsweglTguefMoyqm
FyeilcVfiuevsZkidrv
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ