BjuWovvJg
PnfTochrVazxbur
Static task
static1
Target
0a2f92336430d4f95e440c401757c47e_JaffaCakes118
Size
18KB
MD5
0a2f92336430d4f95e440c401757c47e
SHA1
5d4c3d1746957ee25d2513a3c6c3495db97f19c4
SHA256
3bc3ae5b7d2a3017c91b4601637dee07799e795d146afe9b568fc0fe872a4292
SHA512
e7cf44277105d4a94c834da8d2dbe2484e9fb5c3bcb2c536be503690cd3f80506b0b6a3694a57f1c0f6bc7900b64ac9983f1733115803f6e02120d1aa10e1b0c
SSDEEP
384:MCtcbSWESiO49X5FV1TkSdh69qXadKW4iAlEZx2mJa:M1bSs/E1ByqXaAW4NlEZA2
Checks for missing Authenticode signature.
resource |
---|
0a2f92336430d4f95e440c401757c47e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
KeRemoveSystemServiceTable
KefAcquireSpinLockAtDpcLevel
ZwSetInformationFile
MmCreateMdl
RtlImageNtHeader
KiBugCheckData
IoAttachDeviceToDeviceStackSafe
NtDuplicateObject
CcCanIWrite
RtlCreateUnicodeString
strcmp
RtlAnsiStringToUnicodeString
IoRegisterShutdownNotification
_snprintf
RtlCustomCPToUnicodeN
KeResetEvent
RtlCompareUnicodeString
CcCopyRead
ExAllocatePool
RtlFreeUnicodeString
memcpy
RtlInitString
FsRtlDissectDbcs
FsRtlFastUnlockAllByKey
IoSetFileOrigin
PsIsThreadTerminating
RtlAllocateHeap
ObAssignSecurity
IoReadTransferCount
ExFreePoolWithTag
memset
SeCaptureSecurityDescriptor
Exi386InterlockedIncrementLong
DbgPrint
RtlInitAnsiString
CcCopyRead
KeSetIdealProcessorThread
KeI386MachineType
BjuWovvJg
PnfTochrVazxbur
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ