DllGetClassObject
Static task
static1
Behavioral task
behavioral1
Sample
49ad932ea3f0ec1a9233021da310498e_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
49ad932ea3f0ec1a9233021da310498e_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
49ad932ea3f0ec1a9233021da310498e_JaffaCakes118
-
Size
7KB
-
MD5
49ad932ea3f0ec1a9233021da310498e
-
SHA1
3040da0b3c1d4474e3c240a41023dfcae663c12c
-
SHA256
09296668f0f9c344887d275d91a702d676e003b9ced12dc0542d9363c340127e
-
SHA512
2739eb093e50c6e38d01d21aa499a266cae6367dd6fff7ccf3bd38de10632e7990442d8fb51a558d269e4741f63b98c0731d2df6e6ba88102a915ba5774a3f77
-
SSDEEP
96:nPK0edpCAXQ3tKSVh01ig656+MKbBBPPf3i20opoj8pTMP345QT3BL5aQt:nS0edJg3A6Q+r7fybQpT84+tI
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49ad932ea3f0ec1a9233021da310498e_JaffaCakes118
Files
-
49ad932ea3f0ec1a9233021da310498e_JaffaCakes118.dll windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
CODE Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE