Static task
static1
Behavioral task
behavioral1
Sample
09af040f7be19c72fabdc207e631aaab_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
09af040f7be19c72fabdc207e631aaab_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
09af040f7be19c72fabdc207e631aaab_JaffaCakes118
-
Size
32KB
-
MD5
09af040f7be19c72fabdc207e631aaab
-
SHA1
75aa378b30b217918053f8ca3d7cc4c58daf9260
-
SHA256
bb671d1c46d4d6ac10c83407ec8936a1c7b0ad0a5997998d8b5108246205823b
-
SHA512
b79c2fa01af6bb0966860048f9b83ec9aefbf5178a2045c7c997bf1184a13dc880a0ba59ad603a61d96d8df748842017810e7438cbe3a72f87e66a6691d166b0
-
SSDEEP
768:0gqSK5ZjGTQZwvIN6dcrHdvH1ZrulmxaYSR7DeOJ7UuaKk:0gqSp8ZSQRPRxarGU/vk
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09af040f7be19c72fabdc207e631aaab_JaffaCakes118
Files
-
09af040f7be19c72fabdc207e631aaab_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.packed Size: - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 31KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE