SeImageDBG
Static task
static1
Behavioral task
behavioral1
Sample
3cffa43c2479c7d02e90d596128fb543_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3cffa43c2479c7d02e90d596128fb543_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
3cffa43c2479c7d02e90d596128fb543_JaffaCakes118
-
Size
43KB
-
MD5
3cffa43c2479c7d02e90d596128fb543
-
SHA1
8ef35aab73af7283400a16c6868b22d5fe5c9d30
-
SHA256
a75140de0c0d2bcf6bf072c4af25f7cf92546ba7bca1f11864e8e72e23dfa9de
-
SHA512
aa75d429d414f87faf8ac08b2dcc6a9465f1f021c5092e49193372974b667cf2245af88067e78173327a13d61dd8c5d56fe570143f9fdce5831564d7e149b8ac
-
SSDEEP
768:dWTTTlD/RqJu72NslKEe/dzbZ/6X5yJfppgHeEprG4f3+JzOIJ8ZVkXiusgOifTN:doTeu7te/dzFE5CfppXkrr2yI68sg97N
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3cffa43c2479c7d02e90d596128fb543_JaffaCakes118
Files
-
3cffa43c2479c7d02e90d596128fb543_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.text Size: - Virtual size: 276KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE