__NtCloseObjectAuditAlarm@0
__NtDeleteObjectAuditAlarm@4
__NtPrivilegeObjectAuditAlarm@4
Static task
static1
Behavioral task
behavioral1
Sample
fb758d058728f31035d440ba7c663d32_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
fb758d058728f31035d440ba7c663d32_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
fb758d058728f31035d440ba7c663d32_JaffaCakes118
Size
35KB
MD5
fb758d058728f31035d440ba7c663d32
SHA1
feadd494400fad735248cf0277b8d44e48577965
SHA256
04cf01db5b5fdc3b5583a737543441ad61a117a778149611a869c7c7682815a8
SHA512
5c4a54719b7c0772431a5b6e149e7a35455277d9005eed3ced98fe7be382ec1114f821d23ee5ebeeac85327eeb818240bfad09b729ac290fa53c274f672288c3
SSDEEP
768:TzEcH8g32e73z7CkPAp1YkZh8c6M2enAj+k6wTf:TwO802uj7ZwS8nFBAqy
Checks for missing Authenticode signature.
resource |
---|
fb758d058728f31035d440ba7c663d32_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MmFreeContiguousMemory
MmUnmapIoSpace
MmSizeOfMdl
MmMapIoSpace
MmAllocateContiguousMemory
RtlStringFromGUID
ZwFsControlFile
ZwQueryFullAttributesFile
VerSetConditionMask
IoBuildPartialMdl
_wcsnicmp
ZwMapViewOfSection
RtlInt64ToUnicodeString
RtlAppendUnicodeToString
RtlUnicodeStringToAnsiString
RtlInitString
wcsncat
RtlCompareString
MmAddPhysicalMemory
ZwSetEvent
_vsnprintf
RtlLookupElementGenericTable
RtlLengthSecurityDescriptor
RtlFreeAnsiString
RtlCopyString
RtlEqualString
strrchr
KeTickCount
wcsspn
RtlUnicodeStringToInteger
RtlxUnicodeStringToAnsiSize
ZwQueryInformationFile
ZwDeleteKey
ZwLoadDriver
RtlRealPredecessor
MmUnmapViewInSessionSpace
memset
__NtCloseObjectAuditAlarm@0
__NtDeleteObjectAuditAlarm@4
__NtPrivilegeObjectAuditAlarm@4
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ