Static task
static1
Behavioral task
behavioral1
Sample
b0b6bcad868a629b467882d8c99ebcea_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b0b6bcad868a629b467882d8c99ebcea_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
b0b6bcad868a629b467882d8c99ebcea_JaffaCakes118
-
Size
124KB
-
MD5
b0b6bcad868a629b467882d8c99ebcea
-
SHA1
0dbf4eed64883063f521d54b669fcd08b25d7528
-
SHA256
cabea8990629cd08871cf5db0423a5e4c5631fa542817cc771ccef07f472320a
-
SHA512
d28ef566b0997bbb52e55915192abc038792049811af8a1fe10dd9af4f876fd2e33ff89a2cbf030f45d5963768b8459e55724668424ed8c0872a48e0a42bbe39
-
SSDEEP
3072:E6vLR/+p+uec0+3uoPoTwu/1Znw89qPwQEMDrtdvhbgbToUWrvP73s:E6N+p+uen3oPow+nvQnfJbrUWrvP73
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b0b6bcad868a629b467882d8c99ebcea_JaffaCakes118
Files
-
b0b6bcad868a629b467882d8c99ebcea_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: - Virtual size: 328KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 121KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE