Static task
static1
Behavioral task
behavioral1
Sample
7200f7c1201a26136497d7d2557a4617_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
7200f7c1201a26136497d7d2557a4617_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
7200f7c1201a26136497d7d2557a4617_JaffaCakes118
-
Size
67KB
-
MD5
7200f7c1201a26136497d7d2557a4617
-
SHA1
3e59d87b22c8a491ba5d3fec809fc2d39443eda2
-
SHA256
52a898cf185f77e226252adec4e56207d50d712908d61f445aa05b90ebb284c9
-
SHA512
2490bfc49fcf19a643111277772b4aeae325504a38e7f290895e349fe5d40250e4539770c8b73b8621fc1e8266c6675ce9b842632dfd624b5d8521e3516b8039
-
SSDEEP
1536:bvuKH/ECWORbEq1XwNgsdVjqZ/jEgj+cSYThk87ZC4NkQ:bGKH/EhAqNjer5nVth
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7200f7c1201a26136497d7d2557a4617_JaffaCakes118
Files
-
7200f7c1201a26136497d7d2557a4617_JaffaCakes118.dll windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 181KB - Virtual size: 4KB
Size: 188KB - Virtual size: 4B
���� Size: - Virtual size:
IMAGE_SCN_CNT_CODE