DllGetClassObject
Static task
static1
Behavioral task
behavioral1
Sample
f5c82b3f3a631d965c236463f2ded781_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f5c82b3f3a631d965c236463f2ded781_JaffaCakes118.dll
Resource
win10v2004-20240412-en
General
-
Target
f5c82b3f3a631d965c236463f2ded781_JaffaCakes118
-
Size
7KB
-
MD5
f5c82b3f3a631d965c236463f2ded781
-
SHA1
1c791959f2c784d65cc44a6f1da5c1e703506d12
-
SHA256
2d9f49644154182cd4d69dcc98adffbaead3478d9819d7920ef9689c54a8d883
-
SHA512
cdb2ea70de1d4dc16b1548e8d5badfe54ea2baeb0a72a41870dcd2d2ca5eb1968ea3dd7e7b90ade64a2d4ee53dbb406633f28b66c06b193817f073723cf9e02f
-
SSDEEP
96:nP7r0oXrNYa0jsb1eJqj3njFNXJl3oC0Z4t8DTMP345QT3BL5aQtZ:nH0o7NSiXFThr0Z4CDT84+tI6
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f5c82b3f3a631d965c236463f2ded781_JaffaCakes118
Files
-
f5c82b3f3a631d965c236463f2ded781_JaffaCakes118.dll windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
CODE Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE