RpokqtoYxvgYff
CdcnLuil
WmZokwfQzmj
MexwdtNvekhjpYlaldw
JdzJodkyqeYbumdxLto
Static task
static1
Behavioral task
behavioral1
Sample
db84fafe739d4d7f9ea378fc6dbb4b26_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
db84fafe739d4d7f9ea378fc6dbb4b26_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
db84fafe739d4d7f9ea378fc6dbb4b26_JaffaCakes118
Size
76KB
MD5
db84fafe739d4d7f9ea378fc6dbb4b26
SHA1
f7658ff0c275c770e1702c2ac33225bb9040c211
SHA256
52388ec2e1a5a7145d4f92f91b63b18ba255ddadd7cf15837bf9833ceea9c9e6
SHA512
4863fd41b89bbb78c4e6a7e0548453d6d7801761388b4f399b66f3a71164d6c921f376b48da00d146c55a93edc12490f6f3390fc34917c2266de3e3bbc8efd98
SSDEEP
1536:W4TV+Gwpp6EOk+SAFl9G1MyRwWZElf2lXY2UZ3DZwkOoEeSjtpxTNS:W6+jj6EORSfMlWqB2hY2UJDZ/qLNS
Checks for missing Authenticode signature.
resource |
---|
db84fafe739d4d7f9ea378fc6dbb4b26_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
RtlStringFromGUID
RtlImageNtHeader
IoGetFileObjectGenericMapping
NtCreateSection
ExFreePool
KeProfileInterrupt
RtlDeleteRegistryValue
srand
RtlAnsiCharToUnicodeChar
MmUnmapVideoDisplay
ExAllocatePool
memcpy
wcstombs
ClassGetDescriptor
ClassIoCompleteAssociated
ClassStopUnitPowerHandler
ClassEnableMediaChangeDetection
ClassClaimDevice
ClassAsynchronousCompletion
ClassAcquireRemoveLockEx
ClassSendSrbAsynchronous
ClassWmiCompleteRequest
ClassInitializeSrbLookasideList
ClassInitializeMediaChangeDetection
ClassInterpretSenseInfo
ClassIoComplete
ClassReleaseQueue
ClassSetMediaChangeState
ClassRemoveDevice
HalHandleNMI
HalProcessorIdle
KfAcquireSpinLock
HalReportResourceUsage
IoFreeAdapterChannel
HalAllProcessorsStarted
HalSetBusData
KfReleaseSpinLock
KeRaiseIrql
KeAcquireQueuedSpinLock
RpokqtoYxvgYff
CdcnLuil
WmZokwfQzmj
MexwdtNvekhjpYlaldw
JdzJodkyqeYbumdxLto
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ