Behavioral task
behavioral1
Sample
27315edaedc8af17ebdf5dbb37e6848e_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
27315edaedc8af17ebdf5dbb37e6848e_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
27315edaedc8af17ebdf5dbb37e6848e_JaffaCakes118
-
Size
100KB
-
MD5
27315edaedc8af17ebdf5dbb37e6848e
-
SHA1
b84b3d958c74905614cb7b6afe5a51e1494a98cf
-
SHA256
3acd9514422e4a6dd52ff4e9a1f939f177029bd6b86e5be0a583e6bcfa75836d
-
SHA512
ea93f31f179267f77f34dbe7e29897b486bce522c4069a6dab28a04207396ac30dc71604a713d90a60155fcfb063cda6f1c497c6f2e3d94a857db548af8ebbe2
-
SSDEEP
1536:gqQZYUfp/FQT3Rwl5yPhuvYD8oqVzBJ8yhFFanF4jD06gum9gR0vIuvqmmQ:gqQZYuM9wze3WlSEGnDUm9qiIuyxQ
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27315edaedc8af17ebdf5dbb37e6848e_JaffaCakes118
Files
-
27315edaedc8af17ebdf5dbb37e6848e_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 68KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE