KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
DeleteSelf
HHHH
UUUU
Behavioral task
behavioral1
Sample
0b797c43c48ac2196625079174cbb69f_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0b797c43c48ac2196625079174cbb69f_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
0b797c43c48ac2196625079174cbb69f_JaffaCakes118
Size
41KB
MD5
0b797c43c48ac2196625079174cbb69f
SHA1
594a3fc79f505002ed11e14c73e0bac1d2257387
SHA256
d9600ae2d2077402d4e8f3cf928ed0c3776f016e7a186dd3572a6f2f15a34f31
SHA512
6274b9d7ec8b9110b34e32573501ed64ab280ce57d464e47c1643043ab2ca7f2db81bbea307ce29d87e64c1c514e88bfe50838b7cda95d316d4025ced885d6c5
SSDEEP
768:e15pJHpjLJvmECuUHnzxyEmYOLN9MI7BlISRYzfhFSpPTPBXYbtPWcWrU:e1PJHB+u+zxFS8iLKzfhFk7BXOPkrU
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0b797c43c48ac2196625079174cbb69f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleHandleA
LoadLibraryA
GetProcAddress
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
DeleteSelf
HHHH
UUUU
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE