AtgppuwOviiAwm
CsyPsnyCgjdycTl
BehwcHj
Static task
static1
Target
492cdc59dad37d3ef24e10c0a820ee11_JaffaCakes118
Size
20KB
MD5
492cdc59dad37d3ef24e10c0a820ee11
SHA1
9a1f4b7365d96b15aed6f36a04fb513436c88333
SHA256
2d7f416feb457f28a769a7f07c9f56decf623d4f4bc92ffab9dc61e6f3b539ba
SHA512
4d833c03f78490ff381cb667b6ec585fb550132451e3cb4e6d7acc5ea32f8e9afab81b08f2004e0a6959588e92110a56d2a21f12fd3312344caca64e7a7ad1b3
SSDEEP
384:rh+tx9s1JcpVa6efhTn1sR9eSjgCSf5Y5/R5:rq9s1+na6efhTnKeSjkxY
Checks for missing Authenticode signature.
resource |
---|
492cdc59dad37d3ef24e10c0a820ee11_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
MmAllocateNonCachedMemory
strrchr
IoForwardIrpSynchronously
PoStartNextPowerIrp
ExAcquireResourceSharedLite
ZwWriteFile
ExFreePoolWithTag
RtlImageNtHeader
RtlSplay
SeTokenIsAdmin
ExAllocatePool
RtlLockBootStatusData
strcmp
PsGetProcessInheritedFromUniqueProcessId
PsJobType
FsRtlAreNamesEqual
RtlDeleteAce
ZwOpenTimer
PsGetProcessWin32WindowStation
_wcsupr
KeRegisterBugCheckCallback
ZwYieldExecution
SeCreateClientSecurityFromSubjectContext
FsRtlCurrentBatchOplock
ExInterlockedAddLargeInteger
RtlCreateAcl
RtlTimeToSecondsSince1970
RtlGetCallersAddress
IoForwardAndCatchIrp
ZwQueryObject
IoSetDeviceInterfaceState
RtlOemToUnicodeN
AtgppuwOviiAwm
CsyPsnyCgjdycTl
BehwcHj
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ