Static task
static1
Behavioral task
behavioral1
Sample
a0cfe0bbf8a5c19969a650ef61989910_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a0cfe0bbf8a5c19969a650ef61989910_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
a0cfe0bbf8a5c19969a650ef61989910_JaffaCakes118
-
Size
78KB
-
MD5
a0cfe0bbf8a5c19969a650ef61989910
-
SHA1
37d38e9ad70aebbe2b7795eab3722d87e0721f37
-
SHA256
087aa7ed59d690a258ed557f1dd4bcc781e21b2b99e655774212488da89d7071
-
SHA512
d41648c2f2a1b45faa30a75c4fdc07e456d262f0d25ea0045339d5b63745d04de838b14f662ce5d7f13bb2e8b3e8c0956d10a5c7925fef585ae149e5776487f0
-
SSDEEP
1536:SDafzB4H+ALFEMsvgohxiw9ezAMnZwmOhEK3vIdlB49UFso5zhJNkXgOGX7:SDIl0WTvgohxmzAMuPmDdwUeeN5OGX7
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a0cfe0bbf8a5c19969a650ef61989910_JaffaCakes118
Files
-
a0cfe0bbf8a5c19969a650ef61989910_JaffaCakes118.dll windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 220KB - Virtual size: 4KB
Size: 228KB - Virtual size: 4B
���� Size: - Virtual size:
IMAGE_SCN_CNT_CODE