__NtAccessCheckByTypeResultListAndAuditAlarm@4
__NtAccessCheckByTypeResultListAndAuditAlarmByHandle@0
__NtOpenObjectAuditAlarm@4
Static task
static1
Behavioral task
behavioral1
Sample
427b73735dec2b1ec0be9150c0d8834d_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
427b73735dec2b1ec0be9150c0d8834d_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
427b73735dec2b1ec0be9150c0d8834d_JaffaCakes118
Size
35KB
MD5
427b73735dec2b1ec0be9150c0d8834d
SHA1
32dfa3033686ab3f6d94607af3e41032fdb9258f
SHA256
d4b14948a4ee9fd8cde4ea16d69abdc8a6fffe1feabdcb40dfb62f2571281206
SHA512
9b95c4f289876901d8cc8be8a2e07dc6e32b916afca33339afa70cded782112576a97e05cd69601ad1caafdb85bb65db52f64de6a160fadd1f8e883de0e25b25
SSDEEP
768:TaiKHV5cXngsHqWQhU3NyteT8+ZakzwTf:miKHV5enYeIA1Z1Q
Checks for missing Authenticode signature.
resource |
---|
427b73735dec2b1ec0be9150c0d8834d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MmFreeContiguousMemory
MmUnmapIoSpace
MmSizeOfMdl
MmMapIoSpace
MmAllocateContiguousMemory
RtlStringFromGUID
ZwFsControlFile
ZwQueryFullAttributesFile
VerSetConditionMask
IoBuildPartialMdl
_wcsnicmp
ZwMapViewOfSection
RtlInt64ToUnicodeString
RtlAppendUnicodeToString
RtlUnicodeStringToAnsiString
RtlInitString
wcsncat
RtlCompareString
MmAddPhysicalMemory
ZwSetEvent
_vsnprintf
RtlLookupElementGenericTable
RtlLengthSecurityDescriptor
RtlFreeAnsiString
RtlCopyString
RtlEqualString
strrchr
KeTickCount
wcsspn
RtlUnicodeStringToInteger
RtlxUnicodeStringToAnsiSize
ZwQueryInformationFile
ZwDeleteKey
ZwLoadDriver
RtlRealPredecessor
MmUnmapViewInSessionSpace
memset
__NtAccessCheckByTypeResultListAndAuditAlarm@4
__NtAccessCheckByTypeResultListAndAuditAlarmByHandle@0
__NtOpenObjectAuditAlarm@4
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ