__DESK__
Behavioral task
behavioral1
Sample
67458aa56f73033626341db0dbbf3024_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
67458aa56f73033626341db0dbbf3024_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
67458aa56f73033626341db0dbbf3024_JaffaCakes118
-
Size
146KB
-
MD5
67458aa56f73033626341db0dbbf3024
-
SHA1
aff91a9aa1e98428bc6fbbde5f3b74e3967952f7
-
SHA256
a1d630ba6ca285da73e4377eaa8385194d59932cfd31c07cb3e6d7c4757804ef
-
SHA512
657a93caa2ec682342097ab974863a18ca00cde7f392213dd50ad6ebb99471bf078328e1147fb5f157cfac158add3c89ff7cde7d450eba95a40092fa7ac1d686
-
SSDEEP
3072:5h3k/CVPD36OjerWoZea8kWQhSmFa9U/UFcnenout:n3tD3slZ78fa09U/+cnenoS
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 67458aa56f73033626341db0dbbf3024_JaffaCakes118
Files
-
67458aa56f73033626341db0dbbf3024_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 472KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 143KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE