__ZwFlushVirtualMemory@4
__ZwOpenThreadTokenEx@4
__ZwSetEvent@8
Static task
static1
Behavioral task
behavioral1
Sample
771b9923a3a48f941b9ae07c30a9373e_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
771b9923a3a48f941b9ae07c30a9373e_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
771b9923a3a48f941b9ae07c30a9373e_JaffaCakes118
Size
32KB
MD5
771b9923a3a48f941b9ae07c30a9373e
SHA1
1c9b8d0b63fd6357741cefc39c68ddf9358b0f79
SHA256
08c38ce2048f317d2814f7befbd63c9b3f27cca087c10001fbf744dea3072941
SHA512
ff0063c796b9cf1c7047a3fcc8fd1c518282b32d758ed4375668534f37218c2cbbf7f1943fb706e6081c42f412c4142b6a087ccf4f5d0196396dc6964fee7d36
SSDEEP
768:oO6ne+C9BJc4/zHY/ZfNshsFWeLaKBHbhZ/wEAQqyDf:D6e7BJ7/+lGKOQqe
Checks for missing Authenticode signature.
resource |
---|
771b9923a3a48f941b9ae07c30a9373e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MmUnmapLockedPages
MmProtectMdlSystemAddress
MmAllocateMappingAddress
MmProbeAndLockProcessPages
MmAdvanceMdl
RtlSubtreePredecessor
RtlRealSuccessor
RtlStringFromGUID
IoBuildDeviceIoControlRequest
ExFreePoolWithTag
ZwFsControlFile
ZwQueryFullAttributesFile
VerSetConditionMask
_wcsnicmp
ZwMapViewOfSection
RtlIntegerToUnicodeString
RtlCheckRegistryKey
RtlAppendUnicodeToString
RtlUnicodeStringToAnsiString
_strupr
wcsncat
RtlCompareString
MmAddPhysicalMemory
ZwSetEvent
RtlLengthSecurityDescriptor
RtlFreeAnsiString
strrchr
wcsspn
ZwOpenFile
RtlxUnicodeStringToAnsiSize
ZwDeleteKey
ZwLoadDriver
MmUnmapViewInSessionSpace
__ZwFlushVirtualMemory@4
__ZwOpenThreadTokenEx@4
__ZwSetEvent@8
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ