Static task
static1
Behavioral task
behavioral1
Sample
cf9effa108414b4116d31ca87d9de92f_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cf9effa108414b4116d31ca87d9de92f_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
cf9effa108414b4116d31ca87d9de92f_JaffaCakes118
-
Size
39KB
-
MD5
cf9effa108414b4116d31ca87d9de92f
-
SHA1
5a6f4c923d0d589254200dde814749d2730a7069
-
SHA256
de23365d973c80b2c6329928af3f222e5706d706e152b7a0200a651666a7ea8f
-
SHA512
759dcb5e8f962a04404d144918abd681396c417a95000a9370c0d3e62d6ed2eb5f0913cb3660339074aa909a9021e948771a17aea9697e2179ec416429d9a854
-
SSDEEP
768:XaokJCn1U8EhOJxTTUsbrbjLOSE7cSYd6xZBn0WCWTxigAVY:XaokJe1UpoJV4s73/EnZx0WB8gd
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cf9effa108414b4116d31ca87d9de92f_JaffaCakes118
Files
-
cf9effa108414b4116d31ca87d9de92f_JaffaCakes118.dll windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 108KB - Virtual size: 4KB
Size: 116KB - Virtual size: 4B
���� Size: - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA