Static task
static1
Behavioral task
behavioral1
Sample
72cab873feb84ccec836c7fc741fc27e_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
72cab873feb84ccec836c7fc741fc27e_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
72cab873feb84ccec836c7fc741fc27e_JaffaCakes118
-
Size
19KB
-
MD5
72cab873feb84ccec836c7fc741fc27e
-
SHA1
73bbc86a6f29d7b2aa0652a84c26682ced82f474
-
SHA256
96203d4715a5f408cba3e634a5b497ddee426071f5877053e8cc4843c33444ca
-
SHA512
95f53be88558a997e3fdc1da8d812642a827b2f67e00ae803d3f4dc5672688225bca8b1102fc0c2fff38f1924d4f48a3c178b9305b2143af963857735f596b7f
-
SSDEEP
384:JVWVH61c/T6UWxu9eUOBXtrB8sVm/mX0Jdpgd8C8UEM7:JV0H61c7ExKSxtrB8sI67
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 72cab873feb84ccec836c7fc741fc27e_JaffaCakes118
Files
-
72cab873feb84ccec836c7fc741fc27e_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Sections
.packed Size: - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE