InstallService
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
zhkf
zhko
Behavioral task
behavioral1
Sample
29bb621dbec98a880ad2e6655a1171bd_JaffaCakes118.dll
Resource
win7-20240903-en
Target
29bb621dbec98a880ad2e6655a1171bd_JaffaCakes118
Size
16KB
MD5
29bb621dbec98a880ad2e6655a1171bd
SHA1
d8ede1527068136888bc51a7d1b394b9f663d426
SHA256
f7119cf5df33f3de63a0dd2b86c71e72f5422208122546e1ba6d794f2ab2972f
SHA512
dcfef6c4c433658e9d0cfab2a8e39ae8132a183a861af2e81ec842ca23318132b3fb92370fef0f202fb55c942ec99710eac8cfb5573fc905080c8301550d0907
SSDEEP
192:ihVykqo+sqmeGPHhH5pbfIKfxB6HCJDA9p0GWFXkACAv/siEk66K+1CdLQLe1ZO4:ie4XeKnpTLfxWrfGvv/Sk66KGCr1Af
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
29bb621dbec98a880ad2e6655a1171bd_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InstallService
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
zhkf
zhko
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ