Behavioral task
behavioral1
Sample
a8f129c719d4645d8954f6ad0e91640f_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a8f129c719d4645d8954f6ad0e91640f_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
a8f129c719d4645d8954f6ad0e91640f_JaffaCakes118
-
Size
41KB
-
MD5
a8f129c719d4645d8954f6ad0e91640f
-
SHA1
618c226334321f86bad89d68ad4a513ea68e56b9
-
SHA256
946d0f1e4849bd2234c33312db1eb90497cd879c0136e4063091377d2ea91e89
-
SHA512
aff7d77e4eed30715e66c3c7ced15b01d626a02c8b94122bdaca25d3cf6d0713862956538d328e7ea4aa7cb7199fb00802cae9d8b554f328528783eb83d0805b
-
SSDEEP
768:9n8qKquEPI9DnxOlOQl9Qd7KMWcVpqCTT7ZNVlomzitp:98qK5sWDnAzQdPJplXjkmzo
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a8f129c719d4645d8954f6ad0e91640f_JaffaCakes118
Files
-
a8f129c719d4645d8954f6ad0e91640f_JaffaCakes118.dll windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 110KB - Virtual size: 4KB
Size: 116KB - Virtual size: 4B
���� Size: - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA