InstallService
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
wwhkf
wwhko
Behavioral task
behavioral1
Sample
bc5b98fda527ad73fe8f785cfc319ffa_JaffaCakes118.dll
Resource
win7-20240729-en
Target
bc5b98fda527ad73fe8f785cfc319ffa_JaffaCakes118
Size
13KB
MD5
bc5b98fda527ad73fe8f785cfc319ffa
SHA1
2d16ac6665440e6387b449372ded0b4a7d78a392
SHA256
a24173fe310aab36ce10acd967a9374569f1db1a352cf1a72f43eb3097b38c82
SHA512
5090795c46ac20bb96b4c35a8b384895ef23b4c8aa50b7e18b6ad925138f1e5bd1f416ccf04fe3e17f9d1d98d1be44f41e26ba7306f8972f757b0d4636109217
SSDEEP
192:JFiTxIK0FVyFfo+Cvw08beTUHt47vXMqKm4QhCXv7EMocWbNYIsQUbx1:PUIDFV06hXR5hk7FgXq1
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bc5b98fda527ad73fe8f785cfc319ffa_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InstallService
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
wwhkf
wwhko
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ