WoyCnwaIhmpk
OgsweglTguefMoyqm
FyeilcVfiuevsZkidrv
Static task
static1
Target
3582b01baa3f180a3c7e7cbc32413eef_JaffaCakes118
Size
19KB
MD5
3582b01baa3f180a3c7e7cbc32413eef
SHA1
ddf8ea632b27d13e7734e0b8cd370cf89523b45f
SHA256
d15ca59cf4e4b93d7233ac95619b15a38c8dde686bd878749149b4dec91001e9
SHA512
0fc194dd914ab6aea2af5614b3a986b8523edf6cc18c55416849fe8b4ba43752d25f55fed194a7644ce476511c5386a8d8987c3322ba53e5854876ba9cb9effb
SSDEEP
384:oyxrF88le3WkjI8wARK4PbFBSWDUmxVcjlln47nPJcerzV6Xxa3:osrF88lemkj9wkKqbFBSWQmcA7nP5UY3
Checks for missing Authenticode signature.
resource |
---|
3582b01baa3f180a3c7e7cbc32413eef_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
ExInitializeRundownProtection
ZwQueryInformationProcess
RtlFindLongestRunClear
PsRestoreImpersonation
memcpy
CcPinMappedData
FsRtlInitializeMcb
IoCreateSymbolicLink
RtlAppendUnicodeStringToString
IoReportResourceForDetection
CcGetDirtyPages
FsRtlNotifyFilterChangeDirectory
ExFreePoolWithTag
KeInsertQueueDpc
MmIsAddressValid
FsRtlIsNtstatusExpected
NtDuplicateObject
RtlInt64ToUnicodeString
NtAllocateUuids
DbgPrint
READ_REGISTER_BUFFER_ULONG
ZwCreateFile
RtlReserveChunk
FsRtlLookupLastLargeMcbEntry
ZwDisplayString
CcPinRead
KeStackAttachProcess
RtlImageNtHeader
IoWritePartitionTableEx
KdDebuggerEnabled
ExAllocatePool
strcmp
WoyCnwaIhmpk
OgsweglTguefMoyqm
FyeilcVfiuevsZkidrv
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ