__ExReleaseFastMutex@8
__ExTryToAcquireFastMutex@0
Static task
static1
Target
b89361a6a964d87f6d7184f7c849cfa0_JaffaCakes118
Size
31KB
MD5
b89361a6a964d87f6d7184f7c849cfa0
SHA1
f6f962a7db0b3306dbda3f6670462b20ccb83eb0
SHA256
2e7ac4594665ca6348cf6b0bb22709bd98a8e4cab1b5b7a4fdece389c11fbcb3
SHA512
387c92effaeebff9941e1f58b04a1552db8c1f75f018a5e1b5198f5692babfa1a79827e521100d3e9bc84cdc2cac4f7826effd73d466259b0d3619afcbf9ace9
SSDEEP
768:dVLnOiQcv2Kk1vmPKAF+17FrC3UeoSEXb:LRQbPmjF+FF3nSOb
Checks for missing Authenticode signature.
resource |
---|
b89361a6a964d87f6d7184f7c849cfa0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
ExFreePoolWithTag
ExAllocatePool
IoAllocateDriverObjectExtension
IoAllocateIrp
PsGetCurrentProcessId
ZwPowerInformation
IoDeleteController
KeCancelTimer
ZwOpenTimer
IoGetDeviceObjectPointer
ZwTerminateProcess
IoRaiseInformationalHardError
RtlPrefixUnicodeString
KeWaitForSingleObject
RtlExtendedIntegerMultiply
RtlGUIDFromString
KeInitializeDpc
wcsspn
KeInitializeTimer
RtlTimeFieldsToTime
wcsncpy
RtlInitUnicodeString
RtlSubtreePredecessor
RtlAnsiStringToUnicodeString
_stricmp
wcsrchr
_wcslwr
_allmul
memset
MmRemovePhysicalMemory
MmGetPhysicalMemoryRanges
MmGetPhysicalAddress
__ExReleaseFastMutex@8
__ExTryToAcquireFastMutex@0
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ