__RtlCaptureContext@0
__RtlCaptureStackBackTrace@4
__RtlRandom@4
Static task
static1
Behavioral task
behavioral1
Sample
6129181c7ed2b39956a56eba855a6cee_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6129181c7ed2b39956a56eba855a6cee_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
6129181c7ed2b39956a56eba855a6cee_JaffaCakes118
Size
35KB
MD5
6129181c7ed2b39956a56eba855a6cee
SHA1
cbaa4050f9e1cbf0dfeaef8f17de14f02982fc17
SHA256
0ad9f107f1c9e3bb4c7e24a85cdf7c36c5ae3ded155e1bfef2ff2a9e895516db
SHA512
2fd7b425340958ec241751f775ab68f1c6a026395eed9240a325339f623800d8a95ba445631d484b7fdaa88c032bca1c5812e1e9cda6e34080d7ad42e9e0b762
SSDEEP
768:JD5VikuV1i77su7adiSJbWGT24MHF3STfS:JGtVkEdiSV243a
Checks for missing Authenticode signature.
resource |
---|
6129181c7ed2b39956a56eba855a6cee_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MmFreeContiguousMemory
MmUnmapIoSpace
MmSizeOfMdl
MmMapIoSpace
MmAllocateContiguousMemory
SeSinglePrivilegeCheck
RtlAnsiStringToUnicodeString
ZwFsControlFile
VerSetConditionMask
IoBuildPartialMdl
_wcsnicmp
RtlInitUnicodeString
RtlUnicodeStringToAnsiString
ZwDeleteValueKey
RtlInitString
wcsncat
RtlCompareString
ZwUnloadDriver
RtlValidRelativeSecurityDescriptor
RtlxAnsiStringToUnicodeSize
ZwSetEvent
RtlGUIDFromString
_vsnprintf
RtlLookupElementGenericTable
RtlFreeAnsiString
RtlCopyString
RtlEqualString
strrchr
KeTickCount
wcsspn
ZwQueryInformationFile
MmGetPhysicalMemoryRanges
RtlUpcaseUnicodeChar
RtlRealPredecessor
memset
__RtlCaptureContext@0
__RtlCaptureStackBackTrace@4
__RtlRandom@4
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ