Static task
static1
Behavioral task
behavioral1
Sample
2d63e91aee1c132dd0144ea10c5aa398_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2d63e91aee1c132dd0144ea10c5aa398_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
2d63e91aee1c132dd0144ea10c5aa398_JaffaCakes118
-
Size
67KB
-
MD5
2d63e91aee1c132dd0144ea10c5aa398
-
SHA1
462a76f3db46c4a93eadc3267d3e0ab7bfea627f
-
SHA256
50810e41eda68b8d2502905f6da0841601382746b71dfd1cc23446be851348de
-
SHA512
3617921887f46274e7c4b6e992a7cc92387bc54b13ebcfab2364815c84fbbae53bdcceef58e91fa00e17461803a8f61ae98d1a6beee10d7e5250fd7f1f5265fd
-
SSDEEP
1536:LKOP+4STaCW9LQ26BpbYRhpAqRs5bXfFpY1iDB7ZDFuI5NytcvS0:bP+3mCpVYqb7tpY1iDB7Dx53T
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d63e91aee1c132dd0144ea10c5aa398_JaffaCakes118
Files
-
2d63e91aee1c132dd0144ea10c5aa398_JaffaCakes118.dll windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 176KB - Virtual size: 4KB
Size: 184KB - Virtual size: 4B
���� Size: - Virtual size:
IMAGE_SCN_CNT_CODE