Static task
static1
Behavioral task
behavioral1
Sample
dcf39e13c2fdbe31092f66482a672284_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dcf39e13c2fdbe31092f66482a672284_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
dcf39e13c2fdbe31092f66482a672284_JaffaCakes118
-
Size
14KB
-
MD5
dcf39e13c2fdbe31092f66482a672284
-
SHA1
45864e5d9492cec27f82475265cbf33607c89368
-
SHA256
c01b786c8c8847610d7df57bdfe14833eea2e0a1675ba5f29dcb2f9ff2593dfc
-
SHA512
16f9db3545e3116d9635d0fb84857000a181b154c5e086702726a05df4533a9f3fb3c12e58c72fae1ddace1bec3ce9ce0e6a3ea4bdd68f6b32dcd07e083b33f0
-
SSDEEP
192:8ZhqIP7uzvMl8/OLkS6715OVyhKaWat1wwpGi9wIlF1uAqKRf6RpQgScm0TDr9p2:0hHazklhYS67cyAaFt13GULl+KfLaT
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dcf39e13c2fdbe31092f66482a672284_JaffaCakes118
Files
-
dcf39e13c2fdbe31092f66482a672284_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
data Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE