GameMain
Static task
static1
Behavioral task
behavioral1
Sample
3f6bdfb53e1e1da35b96c33abc753a61_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3f6bdfb53e1e1da35b96c33abc753a61_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
3f6bdfb53e1e1da35b96c33abc753a61_JaffaCakes118
-
Size
25KB
-
MD5
3f6bdfb53e1e1da35b96c33abc753a61
-
SHA1
e6372e2259ae993d7c13ae1e01a68299984e8656
-
SHA256
01353206574e879c9b5da915449a6a68d4449fad71556cc8e6d45ef223e9462c
-
SHA512
49c721e5cb044430ef14b8562574d98afb4486981615d2775519a1a19b7f187377ffbf461d4c6300fa1b9ce932ced611c157710a72af1578a585b9bcc4df98df
-
SSDEEP
384:y53s2KnokWAvQbcUPLypmAKjlV9XPqFFE4d9uYN9smAsR3r6HNF:2ojIbcUTb3lXX745imAQ6
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f6bdfb53e1e1da35b96c33abc753a61_JaffaCakes118
Files
-
3f6bdfb53e1e1da35b96c33abc753a61_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
Size: - Virtual size: 244KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
��� Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE