InstallService
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
wwhkf
wwhko
Behavioral task
behavioral1
Sample
06386d3d13bc2a19e991c8eb84f3aa06_JaffaCakes118.dll
Resource
win7-20240903-en
Target
06386d3d13bc2a19e991c8eb84f3aa06_JaffaCakes118
Size
12KB
MD5
06386d3d13bc2a19e991c8eb84f3aa06
SHA1
037b35b465794dee5f9d7074f7c9403b895e65d4
SHA256
ac3c62fe2c273fd234435af262ee557c0b12daff2362a71758dedc66c0be915a
SHA512
1e49fa3bfdb3367f4def76cc06d97faf650842c0af3d591d8ec77b456e29328295e9c167405c767bb8e78eb4ba288bd71a3877a37ff83687ac99bf49985579fd
SSDEEP
192:rllq0my7J1QWSb04n4hGekZW41QKFQoihUmzkYnyRsTud9KPiMoo:rl8Gkbb5gaW4QKSUikbOSWP
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
06386d3d13bc2a19e991c8eb84f3aa06_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InstallService
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
wwhkf
wwhko
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ