DllGetClassObject
Static task
static1
Behavioral task
behavioral1
Sample
96f26f43a3c931a31d3aae2cc2993086_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
96f26f43a3c931a31d3aae2cc2993086_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
96f26f43a3c931a31d3aae2cc2993086_JaffaCakes118
-
Size
7KB
-
MD5
96f26f43a3c931a31d3aae2cc2993086
-
SHA1
6ddc7d71e461283855ca8f713d0dd891b9389d61
-
SHA256
f69671ce17ce4c4a38b40c60b64f742bea13a91bf6ef908bd1469c18683c63c9
-
SHA512
b27572c99e88658709fdfef8d87fac823b505516c947b5be9ac94b726731dc021b806dd8ba2ccf9aacb16d5c91f5a16ecd4b2ade94ef280aee610f8d0515d492
-
SSDEEP
96:nPPlo2xSjPEanwAAlv2v9sNVXo6HP7adpc+qe0DeE9KwKhX8fTMP345QT3BL5aQj:nVoD8anclYsNNo6vyHiV5KKfT84+tI6
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 96f26f43a3c931a31d3aae2cc2993086_JaffaCakes118
Files
-
96f26f43a3c931a31d3aae2cc2993086_JaffaCakes118.dll windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
CODE Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE