CreateETObject
Static task
static1
Behavioral task
behavioral1
Sample
d626f3b01c5c951f898264048f3f97b7_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d626f3b01c5c951f898264048f3f97b7_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
d626f3b01c5c951f898264048f3f97b7_JaffaCakes118
-
Size
57KB
-
MD5
d626f3b01c5c951f898264048f3f97b7
-
SHA1
a1318d79e2f8fb0a7aba179d3f04ea4d0bb06d6a
-
SHA256
d12a5d64682e61563883a91c277eb28c0041cd3a92bf71f97246d3b15c269914
-
SHA512
a5a494d4c128ab088dbc18e3917cf71945fd1e9a699509935b0762c468d35bc15c45f905c020a1cab2617138edf8bd1191e9e6c70a90e661afa044648f1eb2f0
-
SSDEEP
1536:5Rc7sI++v0NCWH1QDKhakwtYLLM+U1rb5BuZGySn:5RcYI/vqNQ3YXMDbfuGn
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d626f3b01c5c951f898264048f3f97b7_JaffaCakes118
Files
-
d626f3b01c5c951f898264048f3f97b7_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.packed Size: - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RLPack Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE