MyLove
Behavioral task
behavioral1
Sample
61bdef272a32123ed082b7c542e0129e_JaffaCakes118.dll
Resource
win7-20240705-en
General
-
Target
61bdef272a32123ed082b7c542e0129e_JaffaCakes118
-
Size
21KB
-
MD5
61bdef272a32123ed082b7c542e0129e
-
SHA1
37ebe98f10d5b8379dc833bc3884f798744ca542
-
SHA256
1a5cd3d4b5b7591f55838a80852dc85e8a158622c6585b0b58c6f475767a6752
-
SHA512
ed917ec3a356f499fcdf3828a39255b58dd51209fc899b74242e3de2af1d8d4e7f7bff9f9ba6d75b0eb69fa3f5443bf5897cb8163a76210a61c81e30a3527f3e
-
SSDEEP
384:8TDLepAUnLhpDu+OqzA63ntWEtLNHmCpsNsaxfs5sIi0tbOCo:cep/L3unq0ctJhmxkyGtbO
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 61bdef272a32123ed082b7c542e0129e_JaffaCakes118
Files
-
61bdef272a32123ed082b7c542e0129e_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
UPX0 Size: - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rvib Size: 568B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE