Static task
static1
Behavioral task
behavioral1
Sample
5e4c74f97da60c6549d40e23ab3d60c5_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5e4c74f97da60c6549d40e23ab3d60c5_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
5e4c74f97da60c6549d40e23ab3d60c5_JaffaCakes118
-
Size
57KB
-
MD5
5e4c74f97da60c6549d40e23ab3d60c5
-
SHA1
3e5494a46880c25b54b58f5fc0e3c40a100d0d7c
-
SHA256
4b23934ec9c535336f6546c577ebc138f462e2b550ce734c01fa0fc9ac7f2565
-
SHA512
f553c632dfa68950bc8b7cf5a8f3583173f63f92ed446bde1af0e43d271002c2fa4343739afeea1be6086da6d3fbe4d2cd5fb963bde695ea87cf290f47c36b6f
-
SSDEEP
1536:yICeRHvilMHeDP/8tPDWFLIsE1bnuozn3u8lM+eg4x9N/J:B9PGcezQPDWFLIs0DnlMhFN/J
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e4c74f97da60c6549d40e23ab3d60c5_JaffaCakes118
Files
-
5e4c74f97da60c6549d40e23ab3d60c5_JaffaCakes118.dll windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 142KB - Virtual size: 4KB
Size: 148KB - Virtual size: 4B
���� Size: - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA