CreateInterface
Static task
static1
Behavioral task
behavioral1
Sample
859412bd4043cb512246cc7b1cf6179a_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
859412bd4043cb512246cc7b1cf6179a_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
859412bd4043cb512246cc7b1cf6179a_JaffaCakes118
-
Size
37KB
-
MD5
859412bd4043cb512246cc7b1cf6179a
-
SHA1
0c4b3d7c2e99e13723e1f4fe8453a3598b259ab5
-
SHA256
2573f6d1c13b94fcb43c3beb54f7d8f5f72fd33bd57bb4f65003ce6bbbd73a5f
-
SHA512
ad3d91cf812830815a7de442908eecebf709c37584d22ac3e000c007ba39b2d2f757d60722d764cb890e0cfb721a39865d0db9059ac6533aa436604f4978326b
-
SSDEEP
768:qNteeOvPGqOgifFjAm5LT7kh2VEbR5jN6DYUVe9xQoko6:LdO9jp5LfC2GXjNXUoEo6
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 859412bd4043cb512246cc7b1cf6179a_JaffaCakes118
Files
-
859412bd4043cb512246cc7b1cf6179a_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.packed Size: - Virtual size: 204KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE