InstallService
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
wwhkf
wwhko
Behavioral task
behavioral1
Sample
0661b0b68e961b748b181e1bd3aa9537_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0661b0b68e961b748b181e1bd3aa9537_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0661b0b68e961b748b181e1bd3aa9537_JaffaCakes118
Size
16KB
MD5
0661b0b68e961b748b181e1bd3aa9537
SHA1
95924f7ee5f8eb83688b5cd42bb19c3ae3a91507
SHA256
ce5d122397c35cd2108d2516247fb8388685b6af6beac4a0212311627c78364b
SHA512
2b3e047a6087fbb4ded6d8ad24d7d94f9de9e6c88695cb0ab186b0b77a9956a60be4dac8b257301f9ceda7d8ab9954418ae33099bfe57bbac1f3169ff0f6d5f8
SSDEEP
384:U4TV05pQh94P/1Qcua3/x80YfqUF3hIUVu/a4fn:U4TV0wkQcuabOjF3hUCYn
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0661b0b68e961b748b181e1bd3aa9537_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InstallService
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
wwhkf
wwhko
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ