FiBaseSistema
FuncCaCliente
FuncRelatorio
MoveGate
ShowForm
basesistema
Behavioral task
behavioral1
Sample
3a5a20ff03440ee04a5cbddaf34de44c_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3a5a20ff03440ee04a5cbddaf34de44c_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
3a5a20ff03440ee04a5cbddaf34de44c_JaffaCakes118
Size
1.6MB
MD5
3a5a20ff03440ee04a5cbddaf34de44c
SHA1
11b01c31a14bc841922afa6eebec0d4f03bc2ddc
SHA256
1e57ad8095364a86e0a16f8f3cacdfcb2615360bc322980d984dc3734ea17e49
SHA512
a0d6819ad0216fa0ed7f0cbdc5abd67e38617c0c566ff582670afc259a06772d82756e26df5178f7ef39db3ab598a309040e687e7eb624d4706c459b0347dc8a
SSDEEP
24576:x9kSO+P/hSoN9ehpzp6IocPiCiPNjZ/apRy6fPSFZjaXJfOg2m4KrsGm/1aDop:HkQ/GzpNiJ+pRykP+kJWq5sv/1vp
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3a5a20ff03440ee04a5cbddaf34de44c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
FiBaseSistema
FuncCaCliente
FuncRelatorio
MoveGate
ShowForm
basesistema
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE