Static task
static1
Behavioral task
behavioral1
Sample
474bae1dd874a88a0fec8e17a61d75b1_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
474bae1dd874a88a0fec8e17a61d75b1_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
474bae1dd874a88a0fec8e17a61d75b1_JaffaCakes118
-
Size
16KB
-
MD5
474bae1dd874a88a0fec8e17a61d75b1
-
SHA1
6b01a5873019671bc4285328bbec9a5b60eb0540
-
SHA256
c453b9f4e5b495c0800a144f47147aae32421146c558a67b2700535ea3fc08dd
-
SHA512
45be652dacc0a0195753d8e366a0d8d40f4df2c9a7569e7dc19addb85de17000ea71bf99dcb07a3a40e7d42684019e7b37bba4f9d033ceabc8e25552e84a111f
-
SSDEEP
384:RvFUctPJNwoj5xZA2XH6TuFqKUrHDJYCn:RSUZT22XHlF3UzZn
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 474bae1dd874a88a0fec8e17a61d75b1_JaffaCakes118
Files
-
474bae1dd874a88a0fec8e17a61d75b1_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.packed Size: - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE