WoyCnwaIhmpk
OgsweglTguefMoyqm
FyeilcVfiuevsZkidrv
Static task
static1
Target
67591d14e8e0d95833f10583ee517e96_JaffaCakes118
Size
19KB
MD5
67591d14e8e0d95833f10583ee517e96
SHA1
035001940df47adfea6d16c38831593d955d997c
SHA256
4f5bb6463a17b4c2f3fb0915010006932b1b303c278b9963093c37158f07137a
SHA512
cea3d7a40b6b83f1a9718a9bb113801bf023188dd9de069afba01ba7205b145c984a4f4d61d81a49822b770dc0ae07dd7ea1af1d65032edd7100d9c5dd62b142
SSDEEP
384:dTdH0Gavv7lGHzK05ajGs+NDwNMQxUxwlN6Kl4QphR:BdH0Ga56ajGoNMQuwCKX
Checks for missing Authenticode signature.
resource |
---|
67591d14e8e0d95833f10583ee517e96_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
strchr
ZwQueryInformationProcess
CcPreparePinWrite
KeStackAttachProcess
KeInsertQueueDpc
FsRtlLookupLastLargeMcbEntry
ZwCreateFile
PsRestoreImpersonation
IoWritePartitionTableEx
FsRtlNotifyFilterChangeDirectory
RtlAppendUnicodeStringToString
RtlImageNtHeader
ExFreePoolWithTag
ZwDisplayString
KdDebuggerEnabled
CcGetDirtyPages
NtAllocateUuids
RtlReserveChunk
MmIsAddressValid
RtlInt64ToUnicodeString
RtlFindLongestRunClear
NtDuplicateObject
IoCreateSymbolicLink
FsRtlInitializeMcb
CcPrepareMdlWrite
strcmp
IoReportResourceForDetection
ExInitializeRundownProtection
READ_REGISTER_BUFFER_ULONG
ExAllocatePool
FsRtlIsNtstatusExpected
WoyCnwaIhmpk
OgsweglTguefMoyqm
FyeilcVfiuevsZkidrv
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ