Static task
static1
Behavioral task
behavioral1
Sample
255669490873b5d08cf8aa2641d08867_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
255669490873b5d08cf8aa2641d08867_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
255669490873b5d08cf8aa2641d08867_JaffaCakes118
-
Size
64KB
-
MD5
255669490873b5d08cf8aa2641d08867
-
SHA1
c082d8bb42e77812fcc7eb0678012bae679b0b36
-
SHA256
052ec0a5f2c121e1aab3b4ba1505ec6dbab7ff3209aa076b3d0926759302b7ea
-
SHA512
c6c3c621d92cc99c1d2dcbf910c7b52204d4db4c50f48607c416d24c0edf25442036bae65c43b0eb3c6a291476e4cbcb62ad2c86dda9a12dbca87c1e4a12be7c
-
SSDEEP
1536:YyLLtsmNFnJhtiRF1XS0kkoUw9UePmAQNKqzkhJjTUG/:Y+tsmNFnJ6RF1XVkkuUeP4Mjgo
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 255669490873b5d08cf8aa2641d08867_JaffaCakes118
Files
-
255669490873b5d08cf8aa2641d08867_JaffaCakes118.dll windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 178KB - Virtual size: 4KB
Size: 184KB - Virtual size: 4B
���� Size: - Virtual size:
IMAGE_SCN_CNT_CODE