KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
Behavioral task
behavioral1
Sample
a8bc3eac9aeb8cabe42d6293c4fb90fb_JaffaCakes118.dll
Resource
win7-20240729-en
Target
a8bc3eac9aeb8cabe42d6293c4fb90fb_JaffaCakes118
Size
8KB
MD5
a8bc3eac9aeb8cabe42d6293c4fb90fb
SHA1
06ee359e9ffc9601e1cd21c9f2288bbbcd7daa43
SHA256
37a4dc3b161ca2a842a82a2b0a93fe76d9708f83890347b7a518ddbaa944919f
SHA512
9939cf150fc20d2f593f851f1e4dfa9598d3ff0751eeebf44520f4453c88b9283947ae3d409b9b101796ffe02d0a8d6b4f1b195108fadd2e697038693f813a7c
SSDEEP
96:HPTA0aGioQQMqL7lkClNcxKZxGLGKFd0vEqIuVUesYbiguek2/bNYW852BwJGXQv:fdiTQnlkaNcwZxIFOEqvhlbiUzE4o
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a8bc3eac9aeb8cabe42d6293c4fb90fb_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ