Run
Behavioral task
behavioral1
Sample
2459bb51e587bd54270157fffa9508ff_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2459bb51e587bd54270157fffa9508ff_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
2459bb51e587bd54270157fffa9508ff_JaffaCakes118
-
Size
30KB
-
MD5
2459bb51e587bd54270157fffa9508ff
-
SHA1
e49540dee4053df9e51fdf45c0cd3976df919883
-
SHA256
43ceb81f388cc77834c6d6c244f1eb0313aa21de51b5be6c3b092bb76df3b284
-
SHA512
adcc448dacd623fcdeb5c1e8318ab5d667b3a0257d2b8c91be8a6be746547c919e1ab24d476ed9cbb705cef3138c001e7d7789bef3ff6029277725f1bbcd1528
-
SSDEEP
768:X5o2yNu3bPVTVATWq+ifw3BD2u+tcsCFmr9gg:XyqbPcCq+iUZ+/CsH
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 2459bb51e587bd54270157fffa9508ff_JaffaCakes118 unpack001/out.upx
Files
-
2459bb51e587bd54270157fffa9508ff_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 28KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ