__NtDuplicateToken@4
__NtOpenJobObjectToken@8
__NtOpenProcessTokenEx@4
Static task
static1
Behavioral task
behavioral1
Sample
33d995400e437aea2cf6d0b38bb9db92_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
33d995400e437aea2cf6d0b38bb9db92_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
33d995400e437aea2cf6d0b38bb9db92_JaffaCakes118
Size
33KB
MD5
33d995400e437aea2cf6d0b38bb9db92
SHA1
baf25db7065a32ffbbb9ee509f99d007326d5200
SHA256
e09c7ed568a09694b4dbae7f1ef61f463c7b21a9375d20746c1a9802eabe1c26
SHA512
8b6976592b6b2415ff6cdd039b2dc89e1b211ac1e9e25ce88b979dd2f2357c710bb1b23723c188e2e1aff8cdfc9c52efc4cd4a0bd9e1817189152ec3991ec31e
SSDEEP
768:TfRFW+kcOVvdBtjPuZnW6qm9n62ixKW+Yb66Tf:V+Z/VPQWHb
Checks for missing Authenticode signature.
resource |
---|
33d995400e437aea2cf6d0b38bb9db92_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MmUnmapLockedPages
MmFreeContiguousMemory
MmAllocatePagesForMdl
MmFreePagesFromMdl
MmAllocateContiguousMemory
RtlStringFromGUID
ZwFsControlFile
ZwQueryFullAttributesFile
VerSetConditionMask
IoBuildPartialMdl
_wcsnicmp
ZwMapViewOfSection
RtlIntegerToUnicodeString
RtlCheckRegistryKey
RtlAppendUnicodeToString
RtlUnicodeStringToAnsiString
wcsncat
RtlCompareString
MmAddPhysicalMemory
ZwSetEvent
RtlLookupElementGenericTable
RtlLengthSecurityDescriptor
RtlFreeAnsiString
strrchr
_wcsupr
wcsspn
RtlxUnicodeStringToAnsiSize
ZwQueryInformationFile
ZwDeleteKey
ZwLoadDriver
RtlRealPredecessor
MmUnmapViewInSessionSpace
__NtDuplicateToken@4
__NtOpenJobObjectToken@8
__NtOpenProcessTokenEx@4
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ