Static task
static1
Behavioral task
behavioral1
Sample
4d69d7d7500bc0d95ba47eddf6bd0ba2_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4d69d7d7500bc0d95ba47eddf6bd0ba2_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
4d69d7d7500bc0d95ba47eddf6bd0ba2_JaffaCakes118
-
Size
51KB
-
MD5
4d69d7d7500bc0d95ba47eddf6bd0ba2
-
SHA1
aafd7df2b8e71f8780cc4287254766799940ac1a
-
SHA256
7837a738872a064382f2b3f41ccdd182e12e844db44f70fa925412e64e733209
-
SHA512
b4067f9113456d47ad972677b09bfcc02567f47f702d006039c9a9a12dd576a0e3bf7dda40a56ee94b3ddfafc906c63fa6afaa0ee447bd9f4b9051698afae80e
-
SSDEEP
768:K+tS5UKRpW0L7KMpP0ir1w2Ssd1BvdLKZ2fLOfSthUYnBV1KRXgCYARMawkzzqZe:K+GsfKPfrO2j/Bl+WLN7BV1KWM2cj
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4d69d7d7500bc0d95ba47eddf6bd0ba2_JaffaCakes118
Files
-
4d69d7d7500bc0d95ba47eddf6bd0ba2_JaffaCakes118.dll windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 145KB - Virtual size: 4KB
Size: 152KB - Virtual size: 4B
���� Size: - Virtual size: