Static task
static1
Behavioral task
behavioral1
Sample
084229227a48423091cdff0e7676151d_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
084229227a48423091cdff0e7676151d_JaffaCakes118.dll
Resource
win10v2004-20240226-en
General
-
Target
084229227a48423091cdff0e7676151d_JaffaCakes118
-
Size
17KB
-
MD5
084229227a48423091cdff0e7676151d
-
SHA1
f18780a25f7ebd72bf67fd284376615d689e99a1
-
SHA256
0cf4b92967a1dc6e109b5717e1f1167a6b6ca9b1e69a8209775dc390d1246de8
-
SHA512
a38765ded9e105382b565bc584ac312a97863b2ba6a1428b0c107b9ff004c4c83a3e0c1889f62d06bdfc7bc6110b33eae4c379cf4a657c7ea298ab8f7903ab48
-
SSDEEP
384:Qn4yIbtxC9E06z2WIAwUMge660j6k9zr6H+zBBOvHc27hJGgS:Q4yI7C9y3IA+z66LMzrwqBOvHc2U
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 084229227a48423091cdff0e7676151d_JaffaCakes118
Files
-
084229227a48423091cdff0e7676151d_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.packed Size: - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.RLPack Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE