KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
modmCallback
Behavioral task
behavioral1
Sample
03c0868419f862c4b040353951e2d345_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
03c0868419f862c4b040353951e2d345_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
03c0868419f862c4b040353951e2d345_JaffaCakes118
Size
8KB
MD5
03c0868419f862c4b040353951e2d345
SHA1
54caedaa7f78b7f828140c5b2e0e2e15e0161c47
SHA256
9bf4f309696cd4a309bfcc5d973a86e40799b05f4087d023f5db56e290158b1a
SHA512
a9e6349d7b240d84e931cc5573b80aacbf9b6ef20b69c6c9e53d33757e601960e79742d1a53024303732e5bb31a174428c7c06dfa7f2325bad932d53c01c00aa
SSDEEP
96:CkeMKsht6JM1UlEEd76kL4MeBXSKHb0dacWsPTVBbDPFMHRga5i:Bt6Jw+cMdU0di
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
03c0868419f862c4b040353951e2d345_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
modmCallback
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ