__NtAccessCheckByTypeResultListAndAuditAlarm@4
__NtAccessCheckByTypeResultListAndAuditAlarmByHandle@0
__NtOpenObjectAuditAlarm@4
Static task
static1
Behavioral task
behavioral1
Sample
2a91cf12afb7d702e92a4f64669183af_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2a91cf12afb7d702e92a4f64669183af_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2a91cf12afb7d702e92a4f64669183af_JaffaCakes118
Size
35KB
MD5
2a91cf12afb7d702e92a4f64669183af
SHA1
36383ab4414e338b5045f9fdeacf079f3293cdb7
SHA256
bb7b345ed804b1b27015e0db1c31ac5d94e5062174e08b1b41656c3fa4252bc7
SHA512
ebf812ea6ff722dd0be4ba07dc09353a0f4b69c8e06e5f4ae67112a717532af83ae107cab3e757acc25bebfc3cf6659c366d3b88f964cfc51076afedbacc4c50
SSDEEP
768:lU/olhGcXngg5QQJTc6JdQ5NsKLe0wfdB38tBZwTf:e/oPGenB5fJQ62NZeZdJOBS
Checks for missing Authenticode signature.
resource |
---|
2a91cf12afb7d702e92a4f64669183af_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MmFreeContiguousMemory
MmUnmapIoSpace
MmSizeOfMdl
MmMapIoSpace
MmAllocateContiguousMemory
RtlStringFromGUID
ZwFsControlFile
ZwQueryFullAttributesFile
VerSetConditionMask
IoBuildPartialMdl
_wcsnicmp
ZwMapViewOfSection
RtlInt64ToUnicodeString
RtlAppendUnicodeToString
RtlUnicodeStringToAnsiString
RtlInitString
wcsncat
RtlCompareString
MmAddPhysicalMemory
ZwSetEvent
_vsnprintf
RtlLookupElementGenericTable
RtlLengthSecurityDescriptor
RtlFreeAnsiString
RtlCopyString
RtlEqualString
strrchr
KeTickCount
wcsspn
RtlUnicodeStringToInteger
RtlxUnicodeStringToAnsiSize
ZwQueryInformationFile
ZwDeleteKey
ZwLoadDriver
RtlRealPredecessor
MmUnmapViewInSessionSpace
memset
__NtAccessCheckByTypeResultListAndAuditAlarm@4
__NtAccessCheckByTypeResultListAndAuditAlarmByHandle@0
__NtOpenObjectAuditAlarm@4
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ