VjBlhnBfyctCnblhdIf
SqqAetjrwvRvtcw
BzpYseegvBlljpcGwpphuIu
VwPuxnfvXrzumtKvurecEwb
CtmalCansVfhichv
FpuuXvvyxpz
TcrzQsygMjpg
Static task
static1
Behavioral task
behavioral1
Sample
ace2e9bd72174fa8eae16620da4ab2bf_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ace2e9bd72174fa8eae16620da4ab2bf_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ace2e9bd72174fa8eae16620da4ab2bf_JaffaCakes118
Size
67KB
MD5
ace2e9bd72174fa8eae16620da4ab2bf
SHA1
29896b773860147b545102647985d60af6470bcd
SHA256
54842864d2afd5bc6455bbb120c1e28f1f59ffa3270f597a47db8c7a3346eaa2
SHA512
2266e3e0b9ac7bcb06df524d0aa5a1eaeb4e826bdd12dee8bf14b8bfe43a7f3790028facea2831c34b837dd10c5dc20cb5e2a95e59d31f1de308dbd3c43b60d2
SSDEEP
1536:TobAAsaf0MeMfFKe4F/baR07qQ5j6AN8NRLcQFOpG9H+zyM4Pqo6OQ:Tobtse0zM2C0775KNiA9eSRXQ
Checks for missing Authenticode signature.
resource |
---|
ace2e9bd72174fa8eae16620da4ab2bf_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IoEnqueueIrp
RtlImageNtHeader
tolower
NtLockFile
FsRtlIsTotalDeviceFailure
IoBuildAsynchronousFsdRequest
SeAccessCheck
KeSetDmaIoCoherency
RtlCaptureContext
NlsMbCodePageTag
NtWriteFile
KiUnexpectedInterrupt
CcPinMappedData
NtMapViewOfSection
ExAllocatePool
MmRemovePhysicalMemory
FsRtlCheckLockForReadAccess
_purecall
memcpy
ZwRestoreKey
ObOpenObjectByName
KeDelayExecutionThread
ExFreePool
HalClearSoftwareInterrupt
HalAllocateCommonBuffer
IoFlushAdapterBuffers
HalBeginSystemInterrupt
KfRaiseIrql
HalSetEnvironmentVariable
IoSetPartitionInformation
KdComPortInUse
VjBlhnBfyctCnblhdIf
SqqAetjrwvRvtcw
BzpYseegvBlljpcGwpphuIu
VwPuxnfvXrzumtKvurecEwb
CtmalCansVfhichv
FpuuXvvyxpz
TcrzQsygMjpg
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ