__ZwFlushVirtualMemory@4
__ZwOpenThreadTokenEx@4
__ZwSetEvent@8
Static task
static1
Behavioral task
behavioral1
Sample
ffea50deb2b076d00a7bc9a1f44f29ec_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ffea50deb2b076d00a7bc9a1f44f29ec_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ffea50deb2b076d00a7bc9a1f44f29ec_JaffaCakes118
Size
32KB
MD5
ffea50deb2b076d00a7bc9a1f44f29ec
SHA1
9cdf55abbe07c2705e9641ba5863bf9d35a4fd9b
SHA256
eb79ca9d00cbc866670869673aefcf92fddc77d617f9822d9e0a25557913f4f7
SHA512
59ca4b0aa1c3ef52a62450cf0ea8c3f70917b8bcff4a07bb017a9999cf289a2414f03ed866bb2837f523f3ac60c37e0b5ab08549ae7cb31987060215f8d2550c
SSDEEP
768:qqB6GEeh9OCWfKZxj43VF8Ptg8cELWjF36WQrKWzygyNDf:X6GEWOv4xjmVFejZ0
Checks for missing Authenticode signature.
resource |
---|
ffea50deb2b076d00a7bc9a1f44f29ec_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MmUnmapLockedPages
MmProtectMdlSystemAddress
MmAllocateMappingAddress
MmProbeAndLockProcessPages
MmAdvanceMdl
RtlSubtreePredecessor
RtlRealSuccessor
RtlStringFromGUID
IoBuildDeviceIoControlRequest
ExFreePoolWithTag
ZwFsControlFile
ZwQueryFullAttributesFile
VerSetConditionMask
_wcsnicmp
ZwMapViewOfSection
RtlIntegerToUnicodeString
RtlCheckRegistryKey
RtlAppendUnicodeToString
RtlUnicodeStringToAnsiString
_strupr
wcsncat
RtlCompareString
MmAddPhysicalMemory
ZwSetEvent
RtlLengthSecurityDescriptor
RtlFreeAnsiString
strrchr
wcsspn
ZwOpenFile
RtlxUnicodeStringToAnsiSize
ZwDeleteKey
ZwLoadDriver
MmUnmapViewInSessionSpace
__ZwFlushVirtualMemory@4
__ZwOpenThreadTokenEx@4
__ZwSetEvent@8
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ