Static task
static1
Behavioral task
behavioral1
Sample
022b41a5e932a1918058b3cb5a080a28_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
022b41a5e932a1918058b3cb5a080a28_JaffaCakes118.dll
Resource
win10v2004-20240226-en
General
-
Target
022b41a5e932a1918058b3cb5a080a28_JaffaCakes118
-
Size
142KB
-
MD5
022b41a5e932a1918058b3cb5a080a28
-
SHA1
cfb4864e631188188f11497a67d23c87a70dc332
-
SHA256
21815b3ad2b98a3de26d0a4acbd5d71556ab9dbfe5a67f50fa0e2ee69048c926
-
SHA512
ffd7ccf23d1728739fb8091c1e1b71a6b5f1cfdfeb2b5382bb4ae2bb6913e224011d9d4ad06c42d0e9d8c24a6b1bc4fe9fdae702054d4c778c35fc3b4c01a1a5
-
SSDEEP
3072:vd9c4mE6LMgSc1Huo0b4uE5oRUWQld+l0rX/gfAWRna7fb:vk4mzgw1gA5o2AzRnIz
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 022b41a5e932a1918058b3cb5a080a28_JaffaCakes118
Files
-
022b41a5e932a1918058b3cb5a080a28_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.packed Size: - Virtual size: 284KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RLPack Size: 142KB - Virtual size: 142KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE