__NtDuplicateToken@4
__NtOpenJobObjectToken@8
__NtOpenProcessTokenEx@4
Static task
static1
Behavioral task
behavioral1
Sample
21e43623ffd6ef3590b39035a1fa7a27_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
21e43623ffd6ef3590b39035a1fa7a27_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
21e43623ffd6ef3590b39035a1fa7a27_JaffaCakes118
Size
33KB
MD5
21e43623ffd6ef3590b39035a1fa7a27
SHA1
99cda04e809d3dddec8fe1760dead8d12da56f31
SHA256
8924f2d87a2f7918e0bcad4223ff8c98e12be1300f6fb26b930d05e43ed58753
SHA512
173ffc3512f024da67588e6fa5c9c31516d35d6951a24ac84880698ab2f817157fd07c31936625a09e100cf96a54cf356701ed6497886512807bfef8fcc423a3
SSDEEP
768:e7M/wgSzlFGhIqD0j6YzNBBddKN2ZwTI9mTf:t9vhIcOokg1
Checks for missing Authenticode signature.
resource |
---|
21e43623ffd6ef3590b39035a1fa7a27_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MmUnmapLockedPages
MmFreeContiguousMemory
MmAllocatePagesForMdl
MmFreePagesFromMdl
MmAllocateContiguousMemory
RtlStringFromGUID
ZwFsControlFile
ZwQueryFullAttributesFile
VerSetConditionMask
IoBuildPartialMdl
_wcsnicmp
ZwMapViewOfSection
RtlIntegerToUnicodeString
RtlCheckRegistryKey
RtlAppendUnicodeToString
RtlUnicodeStringToAnsiString
wcsncat
RtlCompareString
MmAddPhysicalMemory
ZwSetEvent
RtlUpperChar
_vsnprintf
RtlLookupElementGenericTable
RtlLengthSecurityDescriptor
RtlFreeAnsiString
PsGetVersion
RtlCharToInteger
strrchr
_wcsupr
wcsspn
RtlxUnicodeStringToAnsiSize
ZwQueryInformationFile
ZwDeleteKey
ZwLoadDriver
RtlRealPredecessor
MmUnmapViewInSessionSpace
__NtDuplicateToken@4
__NtOpenJobObjectToken@8
__NtOpenProcessTokenEx@4
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ