__MmGetPhysicalMemoryRanges@0
___MmRemovePhysicalMemory@0
Static task
static1
Target
b0ce209df954db96ab744a7a88b129cf_JaffaCakes118
Size
32KB
MD5
b0ce209df954db96ab744a7a88b129cf
SHA1
b9122ae1c21d47d64e5c966b77368bf0a35c5162
SHA256
79a9cec6950cead075deb4d56d5f7640146ca4da300368e6acb8ba7170db8f89
SHA512
acd2ef2e5931999e81c703cd42d11a8d22c40edfbbab9fb3dbd89e3377c2fc33ad2b3a95ce9216d72a860c6d71a45270ecf0365f4ed4794d3e5ace73eb9dcab3
SSDEEP
384:/2+3OI5LdSs/UJd8yvnJ/X8KgLcQumUOeiADwdAenHxFxQBB2Ir+ZB7arkE:+85JSs/tyR/Revx8wjnHx/QBpU7ar/
Checks for missing Authenticode signature.
resource |
---|
b0ce209df954db96ab744a7a88b129cf_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
ExFreePoolWithTag
ExAllocatePool
KeGetCurrentThread
PsSetCreateProcessNotifyRoutine
SeSinglePrivilegeCheck
ZwDisplayString
IoAttachDeviceByPointer
KeCancelTimer
ZwCreateTimer
IoGetDeviceObjectPointer
ZwSetInformationThread
IoRaiseHardError
IoReportResourceForDetection
KeWaitForSingleObject
KeSetTimer
wcsncmp
RtlCreateRegistryKey
RtlDeleteRegistryValue
KeInitializeDpc
_wcsnicmp
KeInitializeTimer
_strnicmp
RtlInitUnicodeString
RtlDeleteNoSplay
RtlAnsiStringToUnicodeString
_allmul
memset
MmRemovePhysicalMemory
MmGetPhysicalMemoryRanges
MmGetPhysicalAddress
__MmGetPhysicalMemoryRanges@0
___MmRemovePhysicalMemory@0
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ