__ZwFlushVirtualMemory@4
__ZwOpenThreadTokenEx@4
__ZwSetEvent@8
Static task
static1
Behavioral task
behavioral1
Sample
6997f8fe88d9c68717e8fa7580e95254_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6997f8fe88d9c68717e8fa7580e95254_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
6997f8fe88d9c68717e8fa7580e95254_JaffaCakes118
Size
32KB
MD5
6997f8fe88d9c68717e8fa7580e95254
SHA1
ee3e862d739f7e493a75f9424cde77f873f2defe
SHA256
82f2762ff763d6476353a282cb26b467a221ff638e135d1c449aaf0cd672cc9e
SHA512
5fdd7272c8a45be0f017d054207d9f8f9ade5c6d3c3790d0ed2b420f70dc8f7b5ff228767deddf5f9512698f26cd72e5b2450e4fb4a5eb23ffd3dc9f64886665
SSDEEP
768:uqB6GEeh9OaWfKZxj43VF8Ptg8cELWjF36WQrKWhPefgyrDf:b6GEWO34xjmVFejZw3
Checks for missing Authenticode signature.
resource |
---|
6997f8fe88d9c68717e8fa7580e95254_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MmUnmapLockedPages
MmProtectMdlSystemAddress
MmAllocateMappingAddress
MmProbeAndLockProcessPages
MmAdvanceMdl
RtlSubtreePredecessor
RtlRealSuccessor
RtlStringFromGUID
IoBuildDeviceIoControlRequest
ExFreePoolWithTag
ZwFsControlFile
ZwQueryFullAttributesFile
VerSetConditionMask
_wcsnicmp
ZwMapViewOfSection
RtlIntegerToUnicodeString
RtlCheckRegistryKey
RtlAppendUnicodeToString
RtlUnicodeStringToAnsiString
_strupr
wcsncat
RtlCompareString
MmAddPhysicalMemory
ZwSetEvent
RtlLengthSecurityDescriptor
RtlFreeAnsiString
strrchr
wcsspn
ZwOpenFile
RtlxUnicodeStringToAnsiSize
ZwDeleteKey
ZwLoadDriver
MmUnmapViewInSessionSpace
__ZwFlushVirtualMemory@4
__ZwOpenThreadTokenEx@4
__ZwSetEvent@8
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ