Static task
static1
Behavioral task
behavioral1
Sample
ACD.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ACD.exe
Resource
win10v2004-20240709-en
General
-
Target
7427ee531ce5d0d0d6eaeb5ef08ef9eb_JaffaCakes118
-
Size
109KB
-
MD5
7427ee531ce5d0d0d6eaeb5ef08ef9eb
-
SHA1
4c735cea8e55ae2b26dfe3737783fa52cc5caa5f
-
SHA256
95c3f4b9803ba34805e8426280bd672260eed793388a0f2d357da07c42fa62fe
-
SHA512
81d740ee35cf14ff4d54ac48c1fc965d42640fa28c77cbf60259b4b6e8db9b46db6b1a95dd41a651d2a1749da583797a70982746300bd074429f6e00c7fee7b4
-
SSDEEP
3072:iXIXTq6Cku/sHIEByZZqEbK7l1wqYyCEH:GUTq69IeynqP7l1wqY2H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ACD.exe
Files
-
7427ee531ce5d0d0d6eaeb5ef08ef9eb_JaffaCakes118.zip
-
ACD.bin
-
ACD.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
���� Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
���� Size: 94KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
ACD.ini
-
ChangeLog.txt
-
UniCheat.cfg
-
heroes_of_newerth.ico
-
scripts/ACD.scf
-
scripts/camdist.acs
-
scripts/camdistInit.acs
-
scripts/easydeny.acs
-
versionsLocal.cfg