Get_MSN
Get_URL_Explorer
Get_URL_Firefox
xAvise_Desinstalacao
xChange_User
xEnd
xInit
xShutdown
Static task
static1
Behavioral task
behavioral1
Sample
c8bc04efab5cc7418a8f1509a806f1d3_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c8bc04efab5cc7418a8f1509a806f1d3_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
c8bc04efab5cc7418a8f1509a806f1d3_JaffaCakes118
Size
308KB
MD5
c8bc04efab5cc7418a8f1509a806f1d3
SHA1
b07d4d95c330d32d19dee51e091a8a89c95b9795
SHA256
8ed237f94b90fc72e7abb9a1826c6a3fe72553b64a17794f98746be48050f050
SHA512
feda7249132f4c9bd2b88d030f514ce706271f3d16bb49a59ac1943dcf278429ca5fc839381ba4000a55e3b15a5685844441dc2b0f3009dce6f1ec9542350884
SSDEEP
6144:3jQcHv3mYDF5d3QsDquzNmw2cPl/3pk6MNISi2AHWSzctyuNvL0ogqmNbhGN/HiP:TL26XbJZicNZk6MNFrA2SAtL2qmNbhG8
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
c8bc04efab5cc7418a8f1509a806f1d3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Get_MSN
Get_URL_Explorer
Get_URL_Firefox
xAvise_Desinstalacao
xChange_User
xEnd
xInit
xShutdown
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE