KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
modmCallback
Behavioral task
behavioral1
Sample
5a6b7063a68d313e46809eaae475db08_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5a6b7063a68d313e46809eaae475db08_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5a6b7063a68d313e46809eaae475db08_JaffaCakes118
Size
12KB
MD5
5a6b7063a68d313e46809eaae475db08
SHA1
6ae2b5e611fa5b2c44054eea42383db1721659c6
SHA256
14a4e1b524a405b727eb10164d3e696e4268f200825245347113b834862d30b5
SHA512
2dc7add72264aff524f7938d5af43a3b30194d3705e001ec97d2f61a0dfbb37ad3efbc58f6539d827b46dec9ae289630bf6c09743fbc01de19ba3db91dc24d8e
SSDEEP
192:JayNcDIjeuMQXgWh3zQypfH6MBXC9+w8FvGXwsOHLfi+Xw:Jay1kW5r/6MBXg+BBsbOHjNw
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
5a6b7063a68d313e46809eaae475db08_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
modmCallback
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ