WoyCnwaIhmpk
OgsweglTguefMoyqm
FyeilcVfiuevsZkidrv
Static task
static1
Target
20f6d589e9cf3c71ce85ab62420ce85b_JaffaCakes118
Size
19KB
MD5
20f6d589e9cf3c71ce85ab62420ce85b
SHA1
e8d4af2b66951a2901874cc8f047dacaaf33f169
SHA256
397c626a6278cfc3be72a766bf606d8ab064ff2eb67d329261ad1b2e7fde2c1d
SHA512
0a04f612d090ed6e8dd688b3d92c9c9a130c03a7a06f523e56eb5a4771caccaf948cf50b652b9ddf740f404bf6fc71955969495298daacccbcaae9f4a2bd340d
SSDEEP
384:Jtqu6lqd2trNtkOfXaQ55iV5C0bhPUtqz+MeuS0ZP:uu6lq6Nt/fe32tqzzbZP
Checks for missing Authenticode signature.
resource |
---|
20f6d589e9cf3c71ce85ab62420ce85b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
ExInitializeRundownProtection
ZwQueryInformationProcess
RtlFindLongestRunClear
PsRestoreImpersonation
strcmp
CcSetBcbOwnerPointer
FsRtlInitializeMcb
IoCreateSymbolicLink
RtlAppendUnicodeStringToString
IoReportResourceForDetection
CcGetDirtyPages
FsRtlNotifyFilterChangeDirectory
ExFreePoolWithTag
KeInsertQueueDpc
MmIsAddressValid
FsRtlIsNtstatusExpected
NtDuplicateObject
RtlInt64ToUnicodeString
NtAllocateUuids
DbgPrint
READ_REGISTER_BUFFER_ULONG
ZwCreateFile
RtlReserveChunk
FsRtlLookupLastLargeMcbEntry
ZwDisplayString
CcSetDirtyPageThreshold
KeStackAttachProcess
RtlImageNtHeader
IoWritePartitionTableEx
KdDebuggerEnabled
ExAllocatePool
strchr
WoyCnwaIhmpk
OgsweglTguefMoyqm
FyeilcVfiuevsZkidrv
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ