HHHH
InstallService
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
UUUU
Behavioral task
behavioral1
Sample
a03b9bca9a93d0080ae279873baae693_JaffaCakes118.dll
Resource
win7-20240708-en
Target
a03b9bca9a93d0080ae279873baae693_JaffaCakes118
Size
20KB
MD5
a03b9bca9a93d0080ae279873baae693
SHA1
879625dad0d12fbb674334e99c3332fb315890a8
SHA256
153cb7547736f0baf0d6f7b62a587f622f4baa2af7b87c42b7a1d2422175f287
SHA512
6b9c1aa06cebca20cdf409656281bb581ef8daea5a4fd8893db8ad985c301973bcfb6ca0da7cdd0de143b3f21f77fa952075a40f7051442d160ce1762caca0c3
SSDEEP
384:ISMOEO3mLydkkG3mSGlQIL+w7SxSa/7TdvQ3G1kBXtCzqWWUhhDn:Ee2Ak/3c+A0p//dvJSoe2
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a03b9bca9a93d0080ae279873baae693_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
HHHH
InstallService
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
UUUU
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ