DeleteSelf
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
PPPP
QQQQ
Behavioral task
behavioral1
Sample
c0cbadc7dcd0d258662ed18f18afc006_JaffaCakes118.dll
Resource
win7-20240708-en
Target
c0cbadc7dcd0d258662ed18f18afc006_JaffaCakes118
Size
73KB
MD5
c0cbadc7dcd0d258662ed18f18afc006
SHA1
23cf57ba673e7a86a327cc0ab73f2bdbbc6f89df
SHA256
48bc9423152ce83beee8bcde4480bb5848008884cbc086568a8c6ff18a128ab0
SHA512
2571d10fd4eb48574203d69c918f3067bdc27a42dbd2e2cf6f625f994ccce0c93008a1998162776cf8e45708a4b53c039e2bc9572328a79eda2518675c690cc7
SSDEEP
768:ehbKnzv+eapBjKU6nJyOPxgzSwJ+jsi2ZUl9AJmTO7jiNmh9tSz7en3qA0k:ehbG+XWU6nJyOPepk2Fmy7jiwtSgqvk
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
c0cbadc7dcd0d258662ed18f18afc006_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DeleteSelf
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
PPPP
QQQQ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE