Static task
static1
Behavioral task
behavioral1
Sample
8a16358336d01b2b20b06bea86a215fa_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8a16358336d01b2b20b06bea86a215fa_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
8a16358336d01b2b20b06bea86a215fa_JaffaCakes118
-
Size
50KB
-
MD5
8a16358336d01b2b20b06bea86a215fa
-
SHA1
cc6f5d8ae11d39663fde6b67004f509969b0f68e
-
SHA256
d2b2449f159295a416427adff2ee68768bb247c90ef58041f42a91dd3efd949d
-
SHA512
5f7073ad7a0b706ff79250f9fddf1ec376a1379feaf750af71b4f777c82e974c1c612e8e736e7b4424b442ac5dde79393b32beedc44e953dea9c87f5f347f1fb
-
SSDEEP
768:3WLrPwSQn/YtYge2DZo8Z5tuSjIX+nzsYgt0EfvX/pe7TrQgzl9T7meFMfskdGy:3W3onYtfNCA5tuTXOzsj9wrQM3mKis5y
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8a16358336d01b2b20b06bea86a215fa_JaffaCakes118
Files
-
8a16358336d01b2b20b06bea86a215fa_JaffaCakes118.dll windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 140KB - Virtual size: 4KB
Size: 148KB - Virtual size: 4B
���� Size: - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA