__KeInitializeMutant@4
__KeQueryOwnerMutant@0
__KeReadStateMutant@4
Static task
static1
Behavioral task
behavioral1
Sample
ac72badf0815b7c2207516cb1a9c23e9_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ac72badf0815b7c2207516cb1a9c23e9_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ac72badf0815b7c2207516cb1a9c23e9_JaffaCakes118
Size
42KB
MD5
ac72badf0815b7c2207516cb1a9c23e9
SHA1
2576c634f3a243d2955d1e8128a2621386203842
SHA256
984cc4039745528e17c94711044274904ab42dbed9e6ac8fd936821a72738d5f
SHA512
c861cab1ee8eea99d1d863cfae7aa9ae571b67ea8b540a61e986f3c1fe9514289b1ee665ffe1bdb4da7e7a2c00dcf515f8a3644ece027435e41849378c742e07
SSDEEP
768:m6AI4YecJLHgP65DvMRegL8VnVGxW7Xf4sHQjXh20RGKW5IJNTf:m6m/Ksi5DvkL8VcOtQjRzwp5k
Checks for missing Authenticode signature.
resource |
---|
ac72badf0815b7c2207516cb1a9c23e9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SeLockSubjectContext
SeReleaseSubjectContext
SeCaptureSubjectContext
MmIsDriverVerifying
SeUnlockSubjectContext
VerSetConditionMask
RtlSetDaclSecurityDescriptor
RtlUnicodeStringToAnsiString
RtlInsertElementGenericTableFull
RtlInitString
RtlDeleteElementGenericTable
RtlCompareString
ZwSetEvent
_vsnwprintf
ZwDuplicateObject
RtlFreeAnsiString
RtlCopyString
_wcsrev
RtlEqualString
strrchr
KeTickCount
wcsspn
DbgPrintEx
RtlInitializeGenericTable
memset
__KeInitializeMutant@4
__KeQueryOwnerMutant@0
__KeReadStateMutant@4
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ