RrirdumZggmnft
IkhAmofynInewgumKmvha
JitAlmbjiDe
NrdwoFkjxll
HcKpdrsDysmPphuqarJra
Static task
static1
Behavioral task
behavioral1
Sample
3a257827f9ef8197b961ec38dc25cc2b_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3a257827f9ef8197b961ec38dc25cc2b_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3a257827f9ef8197b961ec38dc25cc2b_JaffaCakes118
Size
68KB
MD5
3a257827f9ef8197b961ec38dc25cc2b
SHA1
a1bfc6f1be65b461aa87b7b5e0a3a5c862cc2090
SHA256
4417244503a280346ef697879e56f2cb73b24bab99a11b9ea20c8c9ce8f11826
SHA512
1a5629a847e133115bcd310d4967cb6f6a3fbd20d3c8ae5d7b785b6ba80e16a562a5a877d82522a321f54bceeb6b3b0603d23f485d8ca40350c6f1ec5b90bdde
SSDEEP
1536:vc9jcxbSXgNtyxGC3oC3wWdMQbByBQpTl4Pw4PX:lxbSqsGkNgWdMWyBQpT6Pw4
Checks for missing Authenticode signature.
resource |
---|
3a257827f9ef8197b961ec38dc25cc2b_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
RtlTimeFieldsToTime
memcpy
KeI386SetGdtSelector
ExAllocatePool
RtlEqualSid
ExFreePool
ExEventObjectType
swprintf
ZwCancelIoFile
RtlImageNtHeader
NtSetEvent
ClassReleaseQueue
ClassIoComplete
ClassAcquireChildLock
ClassInitialize
ClassInitializeSrbLookasideList
ClassSpinDownPowerHandler
ClassDisableMediaChangeDetection
ClassQueryTimeOutRegistryValue
ClassWmiFireEvent
ClassCreateDeviceObject
ClassGetVpb
ClassAcquireRemoveLockEx
ClassBuildRequest
ClassInterpretSenseInfo
ExTryToAcquireFastMutex
KeRaiseIrql
KeReleaseQueuedSpinLock
HalAllocateCrashDumpRegisters
HalGetAdapter
HalAssignSlotResources
HalFreeCommonBuffer
HalMakeBeep
IoMapTransfer
HalQueryRealTimeClock
RrirdumZggmnft
IkhAmofynInewgumKmvha
JitAlmbjiDe
NrdwoFkjxll
HcKpdrsDysmPphuqarJra
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ