Hookoff
Hookon
InstallService
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
Behavioral task
behavioral1
Sample
04f126a924d8254eb4ffbe5200a8eb2e_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
04f126a924d8254eb4ffbe5200a8eb2e_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
04f126a924d8254eb4ffbe5200a8eb2e_JaffaCakes118
Size
13KB
MD5
04f126a924d8254eb4ffbe5200a8eb2e
SHA1
9ff42576412e021968a4e76c891de3d8edd144ae
SHA256
990ccb0330faa2cea91fb63b53d50ccb100b252a40df15cc409eccbd2317794d
SHA512
708c65e9924c83090d923413eb957d9ca20bf49900e86f2b0514389c856821de5735fddf8e6e04bc514d4b39b118cb3191d3132b4dba8e57bf606e3995fe8d55
SSDEEP
192:2vQqQLVXh8gaFLKlcMsDBe4dGTLlPG4pdAaTXdjjBxXp4eh6JhU89zvE4CP:2vaVmzFLNDDBe9TLlb7Xdjjrns+8tv0P
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
04f126a924d8254eb4ffbe5200a8eb2e_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Hookoff
Hookon
InstallService
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ