InstallService
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
zhkf
zhko
Behavioral task
behavioral1
Sample
05a6131e3025e6f00656c0ef94d86381_JaffaCakes118.dll
Resource
win7-20240903-en
Target
05a6131e3025e6f00656c0ef94d86381_JaffaCakes118
Size
18KB
MD5
05a6131e3025e6f00656c0ef94d86381
SHA1
70acf71233043d1959d2bbaf9a54ad5b71009482
SHA256
bb89c5441fd954441b4fe369dd13bf2061e4e428ff9eb4d88550f8cb80597c32
SHA512
03759b98feb95537b2759c2b4c48d50413cdf16dbcdb27c2ade6ba993a8be1a6d1b1e11f821cf13283af40e4bc8b505469f494ea7d60db54981a4cc524e9486e
SSDEEP
384:rzYyvlJ0OI1wsgG5qJNlN2sF9hKXyVfekJ4f6U1WAl:rzYuuOIFgNrlN2sqWxyl
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
05a6131e3025e6f00656c0ef94d86381_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InstallService
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
zhkf
zhko
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ