Behavioral task
behavioral1
Sample
dbad9160e076c1556cbdb9984c4f4f99_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dbad9160e076c1556cbdb9984c4f4f99_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
dbad9160e076c1556cbdb9984c4f4f99_JaffaCakes118
-
Size
23KB
-
MD5
dbad9160e076c1556cbdb9984c4f4f99
-
SHA1
dd96509fbc367d280a360962858a548c63228f3e
-
SHA256
7d9b8476a8d80b13b15dcf2f933f13c9737edd104409bbe2252490535e765514
-
SHA512
f9f08155b91b83e14e88ef7b26dd44a94503345f0f3574f85dd9dd5c6206bd19edb62487df6927dcea35937e2f091dc65b200e6a57ae6b8188a6fe1667fe7e05
-
SSDEEP
384:/s4KKySteOOghCGg0kaolN4Djij6B5BC+caW+G1w/s72rrkDLERbgesYA/6K:hIO/g0cN4DuGo+bW+GGdrrHRUesf/7
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dbad9160e076c1556cbdb9984c4f4f99_JaffaCakes118
Files
-
dbad9160e076c1556cbdb9984c4f4f99_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE