__ZwAllocateVirtualMemory@4
__ZwFreeVirtualMemory@8
__ZwWaitForSingleObject@4
Static task
static1
Behavioral task
behavioral1
Sample
20e35947e4597d28507df338a2b06425_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
20e35947e4597d28507df338a2b06425_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
20e35947e4597d28507df338a2b06425_JaffaCakes118
Size
32KB
MD5
20e35947e4597d28507df338a2b06425
SHA1
d50c11fae6fb5871cc4e86a9ce8a30f1af366b90
SHA256
4654db6d690d79a5820353f9f968171da3294f6609291fd3aa66257959fb895c
SHA512
e0b4161aa18212518230f6f8945f629700539edda602b1b594287631ae2d6490fc6ae213de79f5a6928dc84b11de2201edae42426dffaf17bd0b8c35d8cba536
SSDEEP
768:tQU6n9kv1rQL+ps4Hk66374szDUOD+CftUd7ki/Df:L6GCKHkss/Ujk+
Checks for missing Authenticode signature.
resource |
---|
20e35947e4597d28507df338a2b06425_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MmUnmapLockedPages
MmProtectMdlSystemAddress
MmAddVerifierThunks
MmAllocateMappingAddress
MmAdvanceMdl
RtlSubtreePredecessor
RtlRealSuccessor
RtlStringFromGUID
IoBuildDeviceIoControlRequest
ExFreePoolWithTag
ZwFsControlFile
ZwQueryFullAttributesFile
VerSetConditionMask
_wcsnicmp
ZwMapViewOfSection
RtlIntegerToUnicodeString
RtlCheckRegistryKey
RtlAppendUnicodeToString
RtlUnicodeStringToAnsiString
_strupr
wcsncat
RtlCompareString
MmAddPhysicalMemory
ZwSetEvent
RtlLengthSecurityDescriptor
RtlFreeAnsiString
strrchr
wcsspn
ZwOpenFile
RtlxUnicodeStringToAnsiSize
ZwDeleteKey
ZwLoadDriver
MmUnmapViewInSessionSpace
__ZwAllocateVirtualMemory@4
__ZwFreeVirtualMemory@8
__ZwWaitForSingleObject@4
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ