CPlApplet
Behavioral task
behavioral1
Sample
635d2f1e6da891ac0082d4754059b451_JaffaCakes118.dll
Resource
win7-20240708-en
General
-
Target
635d2f1e6da891ac0082d4754059b451_JaffaCakes118
-
Size
202KB
-
MD5
635d2f1e6da891ac0082d4754059b451
-
SHA1
6d978c1ccace906328f4dff57e4fbe8f98970ffc
-
SHA256
05ae42c3aa4efce56a98f5f7d72abe877c7a779258412eeb29c6d0daf72b673c
-
SHA512
c70b259256214da00e0a2a5510aa4fbb006a7299ce17dfb93b70babddc424604e581233cf023c77817eb249b8fe34af4bf8fae79de1c6ef72c5ab3e1fa862b4e
-
SSDEEP
6144:onBlcOcN3DXfRIDwKOMlvvn6JaMXLtaS2m33Ao8joSD:UYaD5v6JaM7A3oS
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 635d2f1e6da891ac0082d4754059b451_JaffaCakes118
Files
-
635d2f1e6da891ac0082d4754059b451_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
UPX0 Size: - Virtual size: 424KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 196KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE