UixIxexSlawkqmFd
Cjaogc
Wqnkgb
Static task
static1
Target
b3f6389a9c62b0a48ddeb4ecca9c596c_JaffaCakes118
Size
20KB
MD5
b3f6389a9c62b0a48ddeb4ecca9c596c
SHA1
61e0c0ad7751cf1a1b7606aad6fac14074c3ac40
SHA256
5a6ce9d4b947426a2ecec8fcfa0c07e71966daa8f214b9009512efe7506e9f83
SHA512
eb997afeba95351b01de0007d61ed08346fc61778347afb12e3bd16378a1e40758e7b6bb6074a762f21828b0e8c1f4029885b59158cd026ec8f7d1fa9bdd3aca
SSDEEP
384:5AFi95OQXSRADb47LTvTGtJliB9P/JJ92akjkW781gW:5AF6vDbgSniBujC1
Checks for missing Authenticode signature.
resource |
---|
b3f6389a9c62b0a48ddeb4ecca9c596c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
FsRtlLookupLastLargeMcbEntry
RtlFindLongestRunClear
CcGetLsnForFileObject
strcmp
strlen
ZwDisplayString
DbgPrint
KeInsertQueueDpc
IoWritePartitionTableEx
FsRtlInitializeMcb
RtlReserveChunk
READ_REGISTER_BUFFER_ULONG
RtlInt64ToUnicodeString
ExInitializeRundownProtection
ZwCreateFile
RtlAppendUnicodeStringToString
FsRtlIsNtstatusExpected
ExAllocatePool
memcpy
NtDuplicateObject
IoReportResourceForDetection
NtAllocateUuids
KdDebuggerEnabled
FsRtlNotifyFilterChangeDirectory
KeStackAttachProcess
RtlImageNtHeader
IoCreateSymbolicLink
CcInitializeCacheMap
ZwQueryInformationProcess
CcGetDirtyPages
MmIsAddressValid
ExFreePoolWithTag
PsRestoreImpersonation
UixIxexSlawkqmFd
Cjaogc
Wqnkgb
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ