Static task
static1
Behavioral task
behavioral1
Sample
!0AntiStealerByDarkP1xel.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
!0AntiStealerByDarkP1xel.dll
Resource
win10v2004-20240426-en
General
-
Target
15f98368fb227629fcec475bc7e851ba_JaffaCakes118
-
Size
84KB
-
MD5
15f98368fb227629fcec475bc7e851ba
-
SHA1
9136b1be11af5426b63ed2c7c8e61ab3965953fe
-
SHA256
d1ef7fc752cc4042f13bf882a331c6b8d2406ccda8732e62a91dd01782f24ae4
-
SHA512
6a3df08fec4081fdfabcba6de1fd605dbf4d9d41aa3e23b85c52bdf1bd3d91d72afe6a5b9c0ae41a8a570ff01c7101a7d8ec55445d44b1d49f739988be8447d1
-
SSDEEP
1536:w2dr14TD2JrsbqDvOTUOzNOLn+gQaOcVlOjyuxDv8fRayXNdc:9JrsuSI0NCn+4O8gxpy9K
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule static1/unpack001/!0AntiStealerByDarkP1xel.asi acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/!0AntiStealerByDarkP1xel.asi
Files
-
15f98368fb227629fcec475bc7e851ba_JaffaCakes118.rar
-
!0AntiStealerByDarkP1xel.LOG
-
!0AntiStealerByDarkP1xel.asi.dll windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_BIND
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
420A Size: - Virtual size: 172KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
420B Size: 84KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
420C Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE