Behavioral task
behavioral1
Sample
0f22b26f6039aae454cd448933396d0f_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0f22b26f6039aae454cd448933396d0f_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
0f22b26f6039aae454cd448933396d0f_JaffaCakes118
-
Size
276KB
-
MD5
0f22b26f6039aae454cd448933396d0f
-
SHA1
7e1b910446b6154b44d5b1a9bcbd17e21e7139a8
-
SHA256
ca01ca7cf961e44e156b87431cafe8000506d3c54eb7f1fbdf427f4fc87e0b13
-
SHA512
3a43434d48cd01cb694c5e52f40cb9bb7f06e1c8399a39be1148b6560a457de2a9efda67d28ca1127e4dceae6eee26ec3992726465826bea3474db4a54aa7dfa
-
SSDEEP
6144:Q/tO4Zw90qHETZ0j3iBqCf26yG1DEo3V97QuoSsu7QL4DaLUMed3QXboS8:y0B96t0jgqCDqo3suoSs0sMJMedAXbop
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f22b26f6039aae454cd448933396d0f_JaffaCakes118
Files
-
0f22b26f6039aae454cd448933396d0f_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 364KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 274KB - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE