__ZwDuplicateObject@8
__ZwFsControlFile@4
__ZwOpenDirectoryObject@4
Static task
static1
Behavioral task
behavioral1
Sample
6721d0d028d0925461a940fa1a02e4db_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6721d0d028d0925461a940fa1a02e4db_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
6721d0d028d0925461a940fa1a02e4db_JaffaCakes118
Size
32KB
MD5
6721d0d028d0925461a940fa1a02e4db
SHA1
6acb2af1c918f25723fc3ec230ee6b5d01a2f724
SHA256
ea876900949980718bae797a513d9eb5933233f477d15b4acc95e39cea9e2e16
SHA512
3e601e7373636096bbb42221ead8bfce6009e65dddefd1550685ee1848bb2bb695c3f921d3f074fed6ee25a6ef8b013c0440abb345b354822f8ddf4de95cedaa
SSDEEP
768:bt6nD0kmZLc4/zHY/ZfNshsFWeLaKBHbhZ/X3AQqiDfV:x66L7/+lGK+QqO
Checks for missing Authenticode signature.
resource |
---|
6721d0d028d0925461a940fa1a02e4db_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MmUnmapLockedPages
MmProtectMdlSystemAddress
MmAddVerifierThunks
MmAllocateMappingAddress
MmAdvanceMdl
RtlSubtreePredecessor
RtlRealSuccessor
RtlStringFromGUID
IoBuildDeviceIoControlRequest
ExFreePoolWithTag
ZwQueryFullAttributesFile
VerSetConditionMask
_wcsnicmp
ZwMapViewOfSection
RtlAppendUnicodeToString
RtlUnicodeStringToAnsiString
wcsncat
ZwSetVolumeInformationFile
RtlCompareString
MmAddPhysicalMemory
ZwSetEvent
RtlLengthSecurityDescriptor
RtlFreeAnsiString
strrchr
_wcsupr
wcsspn
ZwOpenFile
RtlxUnicodeStringToAnsiSize
ZwDeleteKey
ZwLoadDriver
RtlCreateRegistryKey
MmUnmapViewInSessionSpace
__ZwDuplicateObject@8
__ZwFsControlFile@4
__ZwOpenDirectoryObject@4
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ