__ZwLockFile@8
__ZwQuerySecurityObject@4
__ZwUnlockFile@4
Static task
static1
Behavioral task
behavioral1
Sample
2e86ae26e8e153ce0a4405d965eb8769_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2e86ae26e8e153ce0a4405d965eb8769_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2e86ae26e8e153ce0a4405d965eb8769_JaffaCakes118
Size
33KB
MD5
2e86ae26e8e153ce0a4405d965eb8769
SHA1
860be7aefc330435271bfa1470391ddc7ac26982
SHA256
d09ed84091421ceccf0ec09ee8143d3fa0cda85dcd63ab18ddd88450c0df3499
SHA512
c306a59291617bf14d9b23f0145ce0a8a3a23dc4a4cfaeb9e372c8f35dca2280a9e388a2fe8a7726055625591902c29c7e6b4585cddb52f34bc86c5f10fad937
SSDEEP
768:rAW6NGZ4I/iudkmj77+Qu/Y2B7IiQwAqsWTf:36N4Ki34/HB7IY1
Checks for missing Authenticode signature.
resource |
---|
2e86ae26e8e153ce0a4405d965eb8769_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MmUnmapLockedPages
MmProtectMdlSystemAddress
MmAllocateMappingAddress
MmProbeAndLockProcessPages
MmAdvanceMdl
RtlStringFromGUID
ZwFsControlFile
ZwQueryFullAttributesFile
VerSetConditionMask
IoBuildPartialMdl
_wcsnicmp
ZwMapViewOfSection
RtlIntegerToUnicodeString
RtlCheckRegistryKey
RtlAppendUnicodeToString
RtlUnicodeStringToAnsiString
wcsncat
RtlCompareString
MmAddPhysicalMemory
ZwSetEvent
RtlLookupElementGenericTable
RtlLengthSecurityDescriptor
RtlFreeAnsiString
strrchr
_wcsupr
wcsspn
RtlxUnicodeStringToAnsiSize
ZwQueryInformationFile
ZwDeleteKey
ZwLoadDriver
RtlRealPredecessor
MmUnmapViewInSessionSpace
__ZwLockFile@8
__ZwQuerySecurityObject@4
__ZwUnlockFile@4
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ