DeleteSelf
Hookoff
Hookon
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
Behavioral task
behavioral1
Sample
ce9e643f2caf6bfcc281e61d7bd5506b_JaffaCakes118.dll
Resource
win7-20240903-en
Target
ce9e643f2caf6bfcc281e61d7bd5506b_JaffaCakes118
Size
37KB
MD5
ce9e643f2caf6bfcc281e61d7bd5506b
SHA1
1dab2ab401fe4b5e67de4d90f338ce832a35134f
SHA256
2878b092c59663121cfac0d28fa4e473ebf2d4537586ea264ec99085e9d9156c
SHA512
0bf14ce96ea6de249c7a337d09adfd4496cdac0eef3a7890702d8000cb71136709bf1d00f99db62d95b987a5c908c1c448f05b14625b69afa326db78ac0c906e
SSDEEP
384:iSP6Du8Ohcpi2qQbhaNotnm0snMCOH0ruwZqtKXJv9Rqkrq+cm5u/QV/lhdXks79:iSC5oYhm0KMCXLX7Rqkrdr5oUzytxHi
resource | yara_rule |
---|---|
sample | upx |
resource | yara_rule |
---|---|
static1/unpack001/out.upx | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
ce9e643f2caf6bfcc281e61d7bd5506b_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DeleteSelf
Hookoff
Hookon
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ