__NtPrivilegedServiceAuditAlarm@4
__RTL_HEAP_COMMIT_ROUTINE@0
__RtlCreateHeap@4
Static task
static1
Behavioral task
behavioral1
Sample
db234386ec8ce70ced99327634e550ca_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
db234386ec8ce70ced99327634e550ca_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
db234386ec8ce70ced99327634e550ca_JaffaCakes118
Size
35KB
MD5
db234386ec8ce70ced99327634e550ca
SHA1
058623590b4218460520df80cf50f2e0360fb879
SHA256
113fc17d9a71a53edcd9ff2b81eaed29d5b6a14092e5e8c753df434ca0bd9e59
SHA512
5e22ecf432276740ba9e6834b383a84e5bbe9ad9683efdb098d62dfe6a8edd92b03fb4ffd40f6ce92854c2ad91720f082e38b385bae2499e2b03b663a8c54f79
SSDEEP
768:VV8CK2UYgCFFAU6S6v+ctq99ZFI5+4tPWUL2ATCXTfS:VV8CKY7FFAU6S++tNInbea
Checks for missing Authenticode signature.
resource |
---|
db234386ec8ce70ced99327634e550ca_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MmFreeContiguousMemory
MmUnmapIoSpace
MmSizeOfMdl
MmMapIoSpace
MmAllocateContiguousMemory
RtlStringFromGUID
ZwFsControlFile
ZwQueryFullAttributesFile
VerSetConditionMask
IoBuildPartialMdl
_wcsnicmp
ZwMapViewOfSection
RtlInt64ToUnicodeString
RtlAppendUnicodeToString
RtlUnicodeStringToAnsiString
RtlInitString
wcsncat
RtlCompareString
MmAddPhysicalMemory
ZwSetEvent
_vsnprintf
RtlLookupElementGenericTable
RtlLengthSecurityDescriptor
RtlFreeAnsiString
RtlCopyString
RtlEqualString
strrchr
KeTickCount
wcsspn
RtlUnicodeStringToInteger
RtlxUnicodeStringToAnsiSize
ZwQueryInformationFile
ZwDeleteKey
ZwLoadDriver
RtlRealPredecessor
MmUnmapViewInSessionSpace
memset
__NtPrivilegedServiceAuditAlarm@4
__RTL_HEAP_COMMIT_ROUTINE@0
__RtlCreateHeap@4
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ