NN_HookAllApps
Static task
static1
Behavioral task
behavioral1
Sample
8ba0da2d235b17c1f5fc955ca1fcd948_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
8ba0da2d235b17c1f5fc955ca1fcd948_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
8ba0da2d235b17c1f5fc955ca1fcd948_JaffaCakes118
-
Size
4KB
-
MD5
8ba0da2d235b17c1f5fc955ca1fcd948
-
SHA1
9a2e74074abd5b59ccffafdc55f830c5559d231d
-
SHA256
7d4ed4ed807bdadffc5ac202c6949e4022014f11c734f05638c6688259577f03
-
SHA512
86f817c7e396b52b00b3d82566c40df543b85928929dd88d8a9181845806186c7ef939e58c8657802858f33a42f919ed6a9138ac559c0bd35ce15c990db86562
-
SSDEEP
96:WCWpk7AIOjwobXFEss0T61Y6oTJlKY/rTaUZI6I18Smv:d7TOzbXFk0O26iJckZeLq
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8ba0da2d235b17c1f5fc955ca1fcd948_JaffaCakes118
Files
-
8ba0da2d235b17c1f5fc955ca1fcd948_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.packed Size: - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE