Static task
static1
Behavioral task
behavioral1
Sample
40dbc33b8e46ffde384a5c257c7b3c8a_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
40dbc33b8e46ffde384a5c257c7b3c8a_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
40dbc33b8e46ffde384a5c257c7b3c8a_JaffaCakes118
-
Size
23KB
-
MD5
40dbc33b8e46ffde384a5c257c7b3c8a
-
SHA1
1bea10bf7f3d6c61c552bf9630b775d0b5121458
-
SHA256
d2b58ec0b9833e6bf4b11cfecb631748384167fc54530dd154130f85f0992ab0
-
SHA512
20568566ae4bce6510b0440aac1db1ac41babe4a50e7dca9dfa3edcd51dfccc6b60cbbd4d1dae1aa9861a1a616b07dd76a833f26d3cc0df4094dae33f171e87c
-
SSDEEP
384:WfWfAfrR1kOxdBgbEcETNYAWZHkLa6upbUFGU1r9JUFKxKiuwvs0BoDfMw:TfSnHDgocEzupb6H1Z1gukmoY
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40dbc33b8e46ffde384a5c257c7b3c8a_JaffaCakes118
Files
-
40dbc33b8e46ffde384a5c257c7b3c8a_JaffaCakes118.dll windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 68KB - Virtual size: 4KB
Size: 76KB - Virtual size: 4B
���� Size: - Virtual size:
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA