InstallService
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
wwhkf
wwhko
Behavioral task
behavioral1
Sample
058fba196fe82993f4e08ebf36a465ce_JaffaCakes118.dll
Resource
win7-20240903-en
Target
058fba196fe82993f4e08ebf36a465ce_JaffaCakes118
Size
12KB
MD5
058fba196fe82993f4e08ebf36a465ce
SHA1
144e6580e333520ae1803973bc2e4e3c6ebf6dd7
SHA256
ef845b19eef0e7edbefc9edd81965e34400a0e0fa3ea98b282258ee57559861d
SHA512
73597e394875ecbdf0c7a7d99238b6d97064bb5cf22bfc959571be52be9387c0d68924ea333a4d08fc39d2a44fd195ee9770278734fc355dd71738bb790a49b9
SSDEEP
192:hllq0my7J1QWSb04n4hGekZW41QKFQoihUmzkYnyRsTud9KPiMoo:hl8Gkbb5gaW4QKSUikbOSWP
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
058fba196fe82993f4e08ebf36a465ce_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InstallService
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
wwhkf
wwhko
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ