init
oansmas
Behavioral task
behavioral1
Sample
735f55f2873952745802fa2b5881a18d_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
735f55f2873952745802fa2b5881a18d_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
735f55f2873952745802fa2b5881a18d_JaffaCakes118
Size
13KB
MD5
735f55f2873952745802fa2b5881a18d
SHA1
1e08f31845cdb0267d3023f6ced1a791f896e12d
SHA256
44f5792a99ceb7bc0e327acf700a792e1661d331e6adfd2615d77e9756ec7119
SHA512
3c03019f873290bbfed0e1f35d3d391feb15fa32da213ae99828f77c72dfe2715b61b5e81b6372da67d8bf8bfa342b4d1f92565692217c36cb32634d9dc592e9
SSDEEP
192:Ccm7J2J4N3ACY78neaCNfaGV1qobnHzLhqWqWqQ7z5VJPhvnRNm:804N30ragaGX/bnTL4LLQ/tl
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
735f55f2873952745802fa2b5881a18d_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
init
oansmas
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ