DllGetClassObject
Static task
static1
Behavioral task
behavioral1
Sample
2eebf5a4ab7197828577fb2030684a92_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2eebf5a4ab7197828577fb2030684a92_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
2eebf5a4ab7197828577fb2030684a92_JaffaCakes118
-
Size
7KB
-
MD5
2eebf5a4ab7197828577fb2030684a92
-
SHA1
66a4c660d56a12da5d4e7546df813f4f2f939bee
-
SHA256
1e83f82f4fb8093333987711e44d4599547f6ebdbf10d96779d4fadc7bfb58c9
-
SHA512
235c3fd02b49e4d77ed696dbe5950db6860f04b265d507d8509cdd1a22b9f4e50f3b76e52d731adb9220d73cdbd30fe7bdb5f350efe5f435f64dba50c128cc20
-
SSDEEP
96:nPaQOkPfYNtA6v1Pttl7prHYtlh7u88TMP345QT3BL5aQt:nyQOiYNtN1D5hYnND8T84+tI
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2eebf5a4ab7197828577fb2030684a92_JaffaCakes118
Files
-
2eebf5a4ab7197828577fb2030684a92_JaffaCakes118.dll windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
CODE Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE