WoyCnwaIhmpk
OgsweglTguefMoyqm
FyeilcVfiuevsZkidrv
Static task
static1
Target
443194195b640d522478ffa94f4720ec_JaffaCakes118
Size
20KB
MD5
443194195b640d522478ffa94f4720ec
SHA1
03f8b8ee1bbcf6b784948329483c84211b53bf95
SHA256
9c749938ad7b829b4c109cd3adbb9764532d9bbe1559b75bd1d105d5c5b3e6e0
SHA512
e4607a61c072706f48c38c916b08c881e8206764248f343d45a3e93260de469cb26be63ccb54dc6e04078182e9fad0d389a5ac340fd7b7dc024f09bbbc4659ae
SSDEEP
384:kaA3GLifWV0BASN3KO0lgx2gHB7U6K2Uk1cecU04:G8ifvN3K5g3hIl7
Checks for missing Authenticode signature.
resource |
---|
443194195b640d522478ffa94f4720ec_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
ZwQueryInformationProcess
KeInsertQueueDpc
ZwCreateFile
FsRtlInitializeMcb
RtlAppendUnicodeStringToString
ExFreePoolWithTag
RtlFindLongestRunClear
ZwDisplayString
RtlImageNtHeader
READ_REGISTER_BUFFER_ULONG
CcSetDirtyPinnedData
MmIsAddressValid
FsRtlIsNtstatusExpected
DbgPrint
FsRtlLookupLastLargeMcbEntry
IoCreateSymbolicLink
RtlInt64ToUnicodeString
PsRestoreImpersonation
NtDuplicateObject
KeStackAttachProcess
IoReportResourceForDetection
ExInitializeRundownProtection
ExAllocatePool
CcSetFileSizes
strchr
FsRtlNotifyFilterChangeDirectory
CcGetDirtyPages
KdDebuggerEnabled
strcmp
IoWritePartitionTableEx
RtlReserveChunk
NtAllocateUuids
WoyCnwaIhmpk
OgsweglTguefMoyqm
FyeilcVfiuevsZkidrv
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ