SpqJtjjstYuhsfioOq
FstlqZiaotgb
JamVpzwdzYfrgqtiZtscfxpFd
Static task
static1
Target
4792212741e1006cb6e855dd569915ee_JaffaCakes118
Size
20KB
MD5
4792212741e1006cb6e855dd569915ee
SHA1
e374be9f782b70e192f5be7a31e7cf5dc1da62e1
SHA256
a5242aec6aa525370e040a139cb9dff6bc6f21eb98d75b1fa5db43ae73c1750a
SHA512
e5ab11f481a48a70a44410ccd598ac7359b66f628e476df4a6f16e75d809f668b49b6e44f614c4075aa8beb94dc243507e235c84cd0e11ac4e71f94bc5ea379d
SSDEEP
384:Tv794oqhAROhEHYKbtcvxTB1EXLp9ITAa:bJDX/hcvhB1E7R
Checks for missing Authenticode signature.
resource |
---|
4792212741e1006cb6e855dd569915ee_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
FsRtlNotifyFilterChangeDirectory
ExFreePoolWithTag
IoReportResourceForDetection
strlen
FsRtlLookupLastLargeMcbEntry
memcpy
DbgPrint
ZwQueryInformationProcess
RtlFindLongestRunClear
RtlAppendUnicodeStringToString
KeInsertQueueDpc
KdDebuggerEnabled
READ_REGISTER_BUFFER_ULONG
PsRestoreImpersonation
RtlReserveChunk
ZwCreateFile
KeStackAttachProcess
IoCreateSymbolicLink
strcmp
IoWritePartitionTableEx
MmIsAddressValid
NtDuplicateObject
NtAllocateUuids
ZwDisplayString
CcUninitializeCacheMap
FsRtlInitializeMcb
ExInitializeRundownProtection
RtlInt64ToUnicodeString
islower
FsRtlIsNtstatusExpected
isprint
isupper
RtlImageNtHeader
CcGetDirtyPages
ExAllocatePool
CcUnpinData
SpqJtjjstYuhsfioOq
FstlqZiaotgb
JamVpzwdzYfrgqtiZtscfxpFd
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ