DeleteSelf
Hookoff
Hookon
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
Behavioral task
behavioral1
Sample
7010c267b70522c96fbe31f8ed3cf4ce_JaffaCakes118.dll
Resource
win7-20240705-en
Target
7010c267b70522c96fbe31f8ed3cf4ce_JaffaCakes118
Size
20KB
MD5
7010c267b70522c96fbe31f8ed3cf4ce
SHA1
0ea4009838ccbea6c805a7c0f67a38c342e25bd2
SHA256
8ea808d6ad5b70348e5b4c2925711ed299810f97c8c503d7e86a16a7ca2f4c77
SHA512
20504c2736a1c03a05efac677d0b79d6057b23f0f5dd78a656e9838c58c7856dd886b96eae1588366f2e0d2b5bc6dd2e945f726129c0ab584036b102d04a1eca
SSDEEP
192:/4kzHg+iRqcXMk6CpIP7QEsoMLSWLK3odRGVdu/x4ZMzVP04s6mTde10Z:BzHgZEkgFTAK3odftVP03pv
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
7010c267b70522c96fbe31f8ed3cf4ce_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DeleteSelf
Hookoff
Hookon
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ