KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
Behavioral task
behavioral1
Sample
31bb9fdc1d3a7096b5ce1088547b1967_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
31bb9fdc1d3a7096b5ce1088547b1967_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
31bb9fdc1d3a7096b5ce1088547b1967_JaffaCakes118
Size
5KB
MD5
31bb9fdc1d3a7096b5ce1088547b1967
SHA1
f9ac0d17e1ddb2df4d4e94bb32b5af63f242976b
SHA256
bd3a99334ca050f30e5fba7362e6df13b6fb630fdb790e39cf81a7e743814c67
SHA512
f5a0681eb8cb593e9fc18f515d8c10ad4666ffefa039afc31b11562db5cb245d410d8784a1fe281fb8ee41f014a6d2e040b506e0b1a417d9daf8abd676ac1144
SSDEEP
96:RGIo7fR2Jhi/jDx1fpMGEDoGDqso5j+zl7hQXILX5mda:RGIOYJK1fzEuI7CXza
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
31bb9fdc1d3a7096b5ce1088547b1967_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ