InstallService
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
wwhkf
wwhko
Behavioral task
behavioral1
Sample
48c4c6bc95f4995313d320b743a041e1_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
48c4c6bc95f4995313d320b743a041e1_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
48c4c6bc95f4995313d320b743a041e1_JaffaCakes118
Size
13KB
MD5
48c4c6bc95f4995313d320b743a041e1
SHA1
a28929016b117bb986b8c7e1394bb37fe4818a8d
SHA256
16d2429c10c7e9b69269fe6adbedfc2dee47528de039e308bf12005a11317287
SHA512
852884c06809917380ef610da01650c8d79414a799b437efce8cdbaec740fe092beca509190896d671316d0eae1ee3cba0fd9c012357f4400654f0b1b1c6d63c
SSDEEP
192:MAuBD7d+1D5YwC+a2PmNl5I5A8H4gaOxFFbzG8WVfM5CcNQmgTsEkb:duBF+YFdM4gaOxzO8WJ22TT
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
48c4c6bc95f4995313d320b743a041e1_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InstallService
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
wwhkf
wwhko
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ