HHHH
InstallService
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
UUUU
Behavioral task
behavioral1
Sample
06eda6f96eb38ebba8105a31239ff1ee_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
06eda6f96eb38ebba8105a31239ff1ee_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
06eda6f96eb38ebba8105a31239ff1ee_JaffaCakes118
Size
18KB
MD5
06eda6f96eb38ebba8105a31239ff1ee
SHA1
ed3d28f74b8dc5fd7844a1b19026c79f8a897c7f
SHA256
c1d24b5ef9e89bb141c46f7b77084a6d69523c8a888c45120b6e0c92665336c6
SHA512
381d9f50f5b3bca854ffec4281be5159383d7ed89771e46a8bcfe128816f880a61dfc4b719dd24bd195fdbbc29a275208e8c7d2d555468b2249884f1eab9e4f8
SSDEEP
384:m3kEOPKL2K5CA1WXiFb0UkjFWdlxTCAttRV3Xh/RlV1mlOUUX:lI2LA1WXiJ0UkjicQtR1h/TiUX
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
06eda6f96eb38ebba8105a31239ff1ee_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
HHHH
InstallService
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
UUUU
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ