KdD0Transition
KdD3Transition
KdDebuggerInitialize0
KdDebuggerInitialize1
KdReceivePacket
KdRestore
KdSave
KdSendPacket
Static task
static1
Behavioral task
behavioral1
Sample
b98227eb4be5adb5477ac04e17efd517_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b98227eb4be5adb5477ac04e17efd517_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b98227eb4be5adb5477ac04e17efd517_JaffaCakes118
Size
7KB
MD5
b98227eb4be5adb5477ac04e17efd517
SHA1
3727b453e49b357b546e2a398c69fbbf6afd8431
SHA256
d001ffe8f317b6453b2d5abc5ce0e2fa7e4a5868ad64a21df16537ffdb0864a0
SHA512
1f2a94c193e7cac5341c2cae4854241de979009fedad52210f349599f70ecd71c9f3f5641f541740c417685356bce0f1112e12c6ccfc136fc88411f5fb87c2f3
SSDEEP
96:qOj2vrkr5mpk4KaNj4yfvxwsIdqVvcxOs4kFEWcYRfIwWwkD:qOSkVf4KaNEyhwsIdW3s4keWVfIwWb
Checks for missing Authenticode signature.
resource |
---|
b98227eb4be5adb5477ac04e17efd517_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WRITE_REGISTER_UCHAR
READ_REGISTER_UCHAR
HalPrivateDispatchTable
KeFindConfigurationEntry
InbvDisplayString
KdDebuggerNotPresent
_strupr
strstr
MmMapIoSpace
atol
READ_PORT_UCHAR
WRITE_PORT_UCHAR
HalQueryRealTimeClock
HalInitSystem
KdComPortInUse
KdD0Transition
KdD3Transition
KdDebuggerInitialize0
KdDebuggerInitialize1
KdReceivePacket
KdRestore
KdSave
KdSendPacket
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ