__ZwFlushVirtualMemory@4
__ZwOpenProcessTokenEx@4
__ZwSetEvent@8
Static task
static1
Behavioral task
behavioral1
Sample
624780e3e66322a202ff5ebd8904e481_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
624780e3e66322a202ff5ebd8904e481_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
624780e3e66322a202ff5ebd8904e481_JaffaCakes118
Size
32KB
MD5
624780e3e66322a202ff5ebd8904e481
SHA1
13448091fc1197f7484efbbe1741d0920bb1682e
SHA256
4b10384dc4f4a9f8ae5596e5d162139441f581c108b5d1085a22e946add7860f
SHA512
cb6d12234b5084a59cb45991572eceef30e8a9bfa9e872a2a9382fb486f8e95c48fe3282cec1078f7350a6428bd7f4edd34b4861df7eedf71dee6b3b2de06d29
SSDEEP
768:fSF6n93/XyBNoHhIIE93c1l4BIZoydOYQ2Asjb1tDfS:O6ZiBNoHhtEY4aVHH
Checks for missing Authenticode signature.
resource |
---|
624780e3e66322a202ff5ebd8904e481_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MmUnmapLockedPages
MmProtectMdlSystemAddress
MmAddVerifierThunks
MmAllocateMappingAddress
MmAdvanceMdl
RtlSubtreePredecessor
RtlRealSuccessor
RtlStringFromGUID
IoBuildDeviceIoControlRequest
ExFreePoolWithTag
ZwFsControlFile
ZwQueryFullAttributesFile
VerSetConditionMask
_wcsnicmp
ZwMapViewOfSection
RtlIntegerToUnicodeString
RtlCheckRegistryKey
RtlAppendUnicodeToString
RtlUnicodeStringToAnsiString
_strupr
wcsncat
RtlCompareString
MmAddPhysicalMemory
ZwSetEvent
RtlLengthSecurityDescriptor
RtlFreeAnsiString
strrchr
wcsspn
ZwOpenFile
RtlxUnicodeStringToAnsiSize
ZwDeleteKey
ZwLoadDriver
MmUnmapViewInSessionSpace
__ZwFlushVirtualMemory@4
__ZwOpenProcessTokenEx@4
__ZwSetEvent@8
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ