Get_MSN
Get_URL_Explorer
Get_URL_Firefox
xAvise_Desinstalacao
xChange_User
xEnd
xInit
xShutdown
Static task
static1
Behavioral task
behavioral1
Sample
670f430cb84c8c5e12ba19f82befc434_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
670f430cb84c8c5e12ba19f82befc434_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
670f430cb84c8c5e12ba19f82befc434_JaffaCakes118
Size
265KB
MD5
670f430cb84c8c5e12ba19f82befc434
SHA1
b45ad6adac2f8099dfc4731eddcf41e257d6c219
SHA256
944622fb2971d380955059af5f379c2525556d1a0b747dac73ea5cf0b9eb7e08
SHA512
402814b4bd7cfda4e1183ed9fa6279d7bc2f0dc3764f4039dceae9fb31c3cb3b84b7b92d7e19f16db97f71d07a173ae2e06f8a4d6d785db356fbf88b8421f2c2
SSDEEP
6144:byFKCz6hpn4G2+lKI6nCJ2uTEeX3OYHDsJC5yOTcJw3+ykFS2pddl0n4A0dhHZDO:byJc4F+llwuTEU3OYjyU
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
670f430cb84c8c5e12ba19f82befc434_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Get_MSN
Get_URL_Explorer
Get_URL_Firefox
xAvise_Desinstalacao
xChange_User
xEnd
xInit
xShutdown
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE