__ZwAllocateVirtualMemory@4
__ZwFreeVirtualMemory@8
__ZwWaitForSingleObject@4
Static task
static1
Behavioral task
behavioral1
Sample
67c706d05a0cb70ee67fbeeefa1efa63_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
67c706d05a0cb70ee67fbeeefa1efa63_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
67c706d05a0cb70ee67fbeeefa1efa63_JaffaCakes118
Size
32KB
MD5
67c706d05a0cb70ee67fbeeefa1efa63
SHA1
53d5442504dfb2e91c66c7af4eb4a47aebc1c9ee
SHA256
bb5a26c1ba8c7b8797c02ea4a8f5a061da48fc4f03b7618cb5d2cb08cd6ce548
SHA512
a5d21dca18c981dd43066343bb624a313408d02470b900dd19cc740d43ecafc9e5e57704d02f0ef1f062b9054e49ea439bb72573696f0a6c5789f5266aee9834
SSDEEP
768:uQU6n9kv1rKL+ps4Hk66374szDUOD+CftYLizDf:Y6GQKHkss/URq
Checks for missing Authenticode signature.
resource |
---|
67c706d05a0cb70ee67fbeeefa1efa63_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MmUnmapLockedPages
MmProtectMdlSystemAddress
MmAddVerifierThunks
MmAllocateMappingAddress
MmAdvanceMdl
RtlSubtreePredecessor
RtlRealSuccessor
RtlStringFromGUID
IoBuildDeviceIoControlRequest
ExFreePoolWithTag
ZwFsControlFile
ZwQueryFullAttributesFile
VerSetConditionMask
_wcsnicmp
ZwMapViewOfSection
RtlIntegerToUnicodeString
RtlCheckRegistryKey
RtlAppendUnicodeToString
RtlUnicodeStringToAnsiString
_strupr
wcsncat
RtlCompareString
MmAddPhysicalMemory
ZwSetEvent
RtlLengthSecurityDescriptor
RtlFreeAnsiString
strrchr
wcsspn
ZwOpenFile
RtlxUnicodeStringToAnsiSize
ZwDeleteKey
ZwLoadDriver
MmUnmapViewInSessionSpace
__ZwAllocateVirtualMemory@4
__ZwFreeVirtualMemory@8
__ZwWaitForSingleObject@4
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ