_OpenZipArchive@4
_ReadZipArchive@8
Static task
static1
Behavioral task
behavioral1
Sample
fa304cf209574cda39ab9919ebf8172d_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
fa304cf209574cda39ab9919ebf8172d_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
fa304cf209574cda39ab9919ebf8172d_JaffaCakes118
Size
40KB
MD5
fa304cf209574cda39ab9919ebf8172d
SHA1
4873e45d2ecd93baae5642ddc9f8735256454db8
SHA256
4651d109007d6313aa283639f1877ab706d7aed8731f9d6ceb90a37e1e38bddb
SHA512
a4922ed5cdaf8ac8cbf655cab7615c79e84b04638410f18480954c9bbc72f60de9ee29f685979dd6e047acdcf622872c568cbbec4dfe5ee4dedcb8e6f852d3a0
SSDEEP
768:ka3aYqhXeKhXOpbsbyjZJWs8jC3YJrbrv0xwc0H21eC1gfPdKY5F2Hw:ka3JqfdTsETS+HmByHdiHw
Checks for missing Authenticode signature.
resource |
---|
fa304cf209574cda39ab9919ebf8172d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ExFreePoolWithTag
RtlUpcaseUnicodeString
IoBuildSynchronousFsdRequest
RtlCompareString
ExAllocatePool
RtlPrefixUnicodeString
RtlUpperString
IofCallDriver
KeClearEvent
RtlCreateHeap
MmMapLockedPages
VerSetConditionMask
RtlFreeHeap
PoUnregisterSystemState
RtlInitUnicodeString
KeSetEvent
RtlDestroyHeap
IoVerifyPartitionTable
KeInitializeEvent
RtlInitString
MmBuildMdlForNonPagedPool
PoRequestPowerIrp
RtlUnicodeToOemN
RtlUpcaseUnicodeToOemN
RtlAllocateHeap
KeWaitForSingleObject
IoSetPartitionInformationEx
PoCallDriver
FsRtlAllocateFileLock
memset
_OpenZipArchive@4
_ReadZipArchive@8
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ