DllGetClassObject
Static task
static1
Behavioral task
behavioral1
Sample
d0190aba0471f5765ab487034d283f3e_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d0190aba0471f5765ab487034d283f3e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
d0190aba0471f5765ab487034d283f3e_JaffaCakes118
-
Size
6KB
-
MD5
d0190aba0471f5765ab487034d283f3e
-
SHA1
568bdfcbf6aef2ec23cb9c38118e13c36b60dd6b
-
SHA256
8d6c3f53631b53a2f27ef755030ba279103e58114ab7bacee4306b29783a8d28
-
SHA512
92f2a4a4fc481872478c92c0ea69f0ac9a999cd050bcc473ad156acc1c9f086bc6e7152437a1e25b361e2069659af6ad2373edb46c4cfcb6701b263a44d62823
-
SSDEEP
96:nPW3yNeG2XhhejjuPvO6QPvMo+MgejK6v8OTMP345QT3BL5aQt:nuSiveOn60z3CK6EOT84+tI
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d0190aba0471f5765ab487034d283f3e_JaffaCakes118
Files
-
d0190aba0471f5765ab487034d283f3e_JaffaCakes118.dll windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
CODE Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE