__ZwLockFile@8
__ZwQuerySecurityObject@4
__ZwUnlockFile@4
Static task
static1
Behavioral task
behavioral1
Sample
6a1c7940278b12a869b9296f6bfb8466_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6a1c7940278b12a869b9296f6bfb8466_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
6a1c7940278b12a869b9296f6bfb8466_JaffaCakes118
Size
33KB
MD5
6a1c7940278b12a869b9296f6bfb8466
SHA1
c0d98bce0117f3b1166a1584bcfd6f0924bc58d8
SHA256
18e9e5744f33b679fb1e508410850d340ef3338cdac780fa2b9c276280e7c806
SHA512
66e7ba8b7c4eee726c93cfd5224deba4834bb18e4518f3d60a8ac282c543b2b723350e7be232d7448457cfbe324e2838c467aa6f3f775a31f987b58669e1994a
SSDEEP
768:GAW6NGZ4I6iudkmj77+Qu/Y2B7IiQwusWTf:i6N4ti34/HB7IYi
Checks for missing Authenticode signature.
resource |
---|
6a1c7940278b12a869b9296f6bfb8466_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MmUnmapLockedPages
MmProtectMdlSystemAddress
MmAllocateMappingAddress
MmProbeAndLockProcessPages
MmAdvanceMdl
RtlStringFromGUID
ZwFsControlFile
ZwQueryFullAttributesFile
VerSetConditionMask
IoBuildPartialMdl
_wcsnicmp
ZwMapViewOfSection
RtlIntegerToUnicodeString
RtlCheckRegistryKey
RtlAppendUnicodeToString
RtlUnicodeStringToAnsiString
wcsncat
RtlCompareString
MmAddPhysicalMemory
ZwSetEvent
RtlLookupElementGenericTable
RtlLengthSecurityDescriptor
RtlFreeAnsiString
strrchr
_wcsupr
wcsspn
RtlxUnicodeStringToAnsiSize
ZwQueryInformationFile
ZwDeleteKey
ZwLoadDriver
RtlRealPredecessor
MmUnmapViewInSessionSpace
__ZwLockFile@8
__ZwQuerySecurityObject@4
__ZwUnlockFile@4
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ