_KillEverything@4
_StartKilling@8
Static task
static1
Behavioral task
behavioral1
Sample
a1446854cb25ae3b21a789144e6d466e_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a1446854cb25ae3b21a789144e6d466e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a1446854cb25ae3b21a789144e6d466e_JaffaCakes118
Size
40KB
MD5
a1446854cb25ae3b21a789144e6d466e
SHA1
2382c5bbedab178f961ef4f522e35624d4fd727c
SHA256
cb37fa1ffdf7aaca5b4241484eeafbb7fa7f3de594a8543f6437de73b64ae9c1
SHA512
980bbd71f0d648cd3eed597c7d72e40aebd20ee88ba4139401cf0505fa95752c84727f743fdd91ee210b71348e29944eb4b68fc5e7f23949000247df0bf3835e
SSDEEP
768:AHPSogqfoXeKhXOpbsbyjZJWs8jC3YJrbrv0xwc0H21eC1gfPdKY5F26w:SPtgqfUdTsETS+HmByHdi6w
Checks for missing Authenticode signature.
resource |
---|
a1446854cb25ae3b21a789144e6d466e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
RtlNumberGenericTableElements
ExFreePoolWithTag
IoBuildPartialMdl
ExAllocatePool
RtlUpperChar
RtlLookupElementGenericTable
RtlEqualString
IoGetBootDiskInformation
KeClearEvent
RtlCreateHeap
MmMapLockedPages
VerSetConditionMask
RtlFreeHeap
PoUnregisterSystemState
RtlInitUnicodeString
KeSetEvent
RtlDestroyHeap
KeInitializeEvent
RtlInitString
MmBuildMdlForNonPagedPool
RtlCompareString
PoRequestPowerIrp
RtlUnicodeToOemN
RtlUpcaseUnicodeToOemN
PoSetPowerState
IoWritePartitionTableEx
RtlAllocateHeap
KeWaitForSingleObject
IoSetPartitionInformationEx
FsRtlAllocateFileLock
memset
_KillEverything@4
_StartKilling@8
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ