Get_MSN
Get_URL_Explorer
Get_URL_Firefox
xAvise_Desinstalacao
xChange_User
xEnd
xInit
xShutdown
Static task
static1
Behavioral task
behavioral1
Sample
3ea586a92ed23aaf728488201291deb0_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3ea586a92ed23aaf728488201291deb0_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3ea586a92ed23aaf728488201291deb0_JaffaCakes118
Size
265KB
MD5
3ea586a92ed23aaf728488201291deb0
SHA1
19716cb54b36e30deaff9091b395f3c1c3784a74
SHA256
9293e835f5096686dd081b75623f0a5ddecdbd80456be7ed04c073b116dfa249
SHA512
3451ce40f5204b06734ecee75685c24aa0320282a4d438ddac7ccef8bdf1c375084c5d38182afd1d99ab1556e8d25849765c64f85148233d1353c16a88004cd2
SSDEEP
6144:byFKCz6hpn4G2+lKI6nCJ2uTEeX3OYHDsG5yOTcJw3+ykFS2pddl0n4A0dhHZDGZ:byJc4F+llwuTEU3OYjF
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
3ea586a92ed23aaf728488201291deb0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Get_MSN
Get_URL_Explorer
Get_URL_Firefox
xAvise_Desinstalacao
xChange_User
xEnd
xInit
xShutdown
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE