__ZwAllocateVirtualMemory@4
__ZwFreeVirtualMemory@8
__ZwWaitForSingleObject@4
Static task
static1
Behavioral task
behavioral1
Sample
2acad854cedded84e6197cf9277b949f_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2acad854cedded84e6197cf9277b949f_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2acad854cedded84e6197cf9277b949f_JaffaCakes118
Size
32KB
MD5
2acad854cedded84e6197cf9277b949f
SHA1
316d0e98290d8af85c7b96d698591d55b35892c9
SHA256
7676dde47f3f093b55374f9feaeff0dda2a2e2077dbdfb65a3c51c7857f79245
SHA512
144c7be47b2f3e042acdf919cc1277d22a56b02e56c518bf5c0d92ad5d7c32417e29ad790afec9a58fc88c9d960e9c9536d7ae639584b441e28c9131ee5ebe39
SSDEEP
768:IT6nykvVrQTIddbU4XS5xTzoTkHsQ5u1/TcOkN8oRq7Kkhx/vDf:W6RQk8wSjoTkMx7cOk6oghx/7
Checks for missing Authenticode signature.
resource |
---|
2acad854cedded84e6197cf9277b949f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MmUnmapLockedPages
MmProtectMdlSystemAddress
MmAddVerifierThunks
MmAllocateMappingAddress
MmAdvanceMdl
RtlSubtreePredecessor
RtlRealSuccessor
RtlStringFromGUID
IoBuildDeviceIoControlRequest
ExFreePoolWithTag
ZwFsControlFile
ZwQueryFullAttributesFile
VerSetConditionMask
_wcsnicmp
ZwMapViewOfSection
RtlIntegerToUnicodeString
RtlCheckRegistryKey
RtlAppendUnicodeToString
RtlUnicodeStringToAnsiString
_strupr
wcsncat
RtlCompareString
MmAddPhysicalMemory
ZwSetEvent
RtlLengthSecurityDescriptor
RtlFreeAnsiString
strrchr
wcsspn
ZwOpenFile
RtlxUnicodeStringToAnsiSize
ZwDeleteKey
ZwLoadDriver
MmUnmapViewInSessionSpace
__ZwAllocateVirtualMemory@4
__ZwFreeVirtualMemory@8
__ZwWaitForSingleObject@4
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ