InstallService
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
PPPP
QQQQ
Behavioral task
behavioral1
Sample
2aeaf4133497106bcda1027eef59693d_JaffaCakes118.dll
Resource
win7-20240903-en
Target
2aeaf4133497106bcda1027eef59693d_JaffaCakes118
Size
16KB
MD5
2aeaf4133497106bcda1027eef59693d
SHA1
2e39b4ce99cef6b82c1f9f0bfc879a3e07b6feb7
SHA256
7ffe32cf05583cf49e9cbb2e15eb549a1f90e83af8164c3096c10871602dd75a
SHA512
be96d37ad59416b57360a645b336ad210519b5135bbb07b85186343f890f5945b270a3960f07dc6a6df5dcd1c773d2613f294c52a6b10f4072228ec8557a157b
SSDEEP
192:qAdDMPSMek3a6fQiO0tAXgxTEoA6OiA62w7wtL1PkQ69Rh3hnecolnBam:JdDESMeMa6fnOWTEoA6Xp72ktzh3hTbm
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2aeaf4133497106bcda1027eef59693d_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InstallService
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
PPPP
QQQQ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ