___CPPdebugHook
Static task
static1
Behavioral task
behavioral1
Sample
3b37b78c73d71f930ea9df8469a6cfde_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3b37b78c73d71f930ea9df8469a6cfde_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
3b37b78c73d71f930ea9df8469a6cfde_JaffaCakes118
-
Size
191KB
-
MD5
3b37b78c73d71f930ea9df8469a6cfde
-
SHA1
0b64486aae750405f5f9792988ad772c7308dc51
-
SHA256
e13ca72be907890e6981407ea3be71c855424158772c7ec0ee054e162ec31627
-
SHA512
b5ec65469958e57b85a2632524fd81d83e5b98aec48edf640db7e1dbc5a268ea17c3c3f4d0db5194a812ad8e1be080340ab8fc9e829d18be38793eaf39ef5215
-
SSDEEP
3072:3CnU2myBqsUulloYPwl5XW/Um5KJwIi6FE2cf69a7SH+RDylimdUHxpcxSH9C:ynlZUSloDWM2Nyy69CDWirgxsC
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b37b78c73d71f930ea9df8469a6cfde_JaffaCakes118
Files
-
3b37b78c73d71f930ea9df8469a6cfde_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
qTTC Size: - Virtual size: 372KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qTTC Size: 189KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE