DeleteSelf
Hookoff
Hookon
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
Behavioral task
behavioral1
Sample
733fe9c57dc1f82a47c223f4ea8a9c18_JaffaCakes118.dll
Resource
win7-20240705-en
Target
733fe9c57dc1f82a47c223f4ea8a9c18_JaffaCakes118
Size
17KB
MD5
733fe9c57dc1f82a47c223f4ea8a9c18
SHA1
ec98c88d2821be9fc66a5d2a36c4fc9247d85dac
SHA256
2664dae71bd21c7b2d8fc7a8d0f2f65ef83ff9deb68b4acee474a7342197dab2
SHA512
0bd599cca0dd353fef0e4edbe8d6895d617f6b258622f4e68c4dbe619d955cf44d0cc2e05d47290250a16c6e8f251e2c9a684e96d1ba5c4c496629cf328e6de9
SSDEEP
384:U1m1taAPxMNcCKLGUGxWdQAEOTaQX0FHzpPJSziku:U2AAPqW6RUdQDOlEpz5A6
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
733fe9c57dc1f82a47c223f4ea8a9c18_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DeleteSelf
Hookoff
Hookon
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ