Static task
static1
Behavioral task
behavioral1
Sample
dc2e34f75e5816c42c5760dc9cbc977f_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
dc2e34f75e5816c42c5760dc9cbc977f_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
dc2e34f75e5816c42c5760dc9cbc977f_JaffaCakes118
-
Size
27KB
-
MD5
dc2e34f75e5816c42c5760dc9cbc977f
-
SHA1
e541e1eb7fb2d880411dd0acf92eb3469145fed1
-
SHA256
c9c5de2aa18379c114acb3d38fdd1d4fe5387590ad4ac417a3eba717438e16f5
-
SHA512
f2b2b2a0f46ac4656505574fcb5ba423538ba796670329587a9339d43a209725900892b413d01f4141fbc0f3b2f7face0aa54448226bad072ce7cdc9654a9f2a
-
SSDEEP
384:y6tn1JLYoeer4Dgrnzhyw7VXoycOolh+dKk53HkXgNCn22RP6/Lf+ZJGRpT4u6Wy:rBZaDOzP79oycBoRHO22Ri/LtXjBEV
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dc2e34f75e5816c42c5760dc9cbc977f_JaffaCakes118
Files
-
dc2e34f75e5816c42c5760dc9cbc977f_JaffaCakes118.dll windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
��0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
��1 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE