MyLove
Behavioral task
behavioral1
Sample
6893c43c6ac63bd597b3240037c8bd9c_JaffaCakes118.dll
Resource
win7-20240708-en
General
-
Target
6893c43c6ac63bd597b3240037c8bd9c_JaffaCakes118
-
Size
16KB
-
MD5
6893c43c6ac63bd597b3240037c8bd9c
-
SHA1
7497e407228c239ff66294da631bd5ca2ce4dfb4
-
SHA256
8222dbc23e8339cab9df928f55c92265b8d8589da4601e1d7a129e29bed0d66d
-
SHA512
61fe99114812b450bb22e64a8d59e7afce8145c2b996458c35cba58abce7635421cedf9f81c3790bc187e575d94507f9448cd21e604c80437fa7e2e9bab1e68e
-
SSDEEP
384:bZgWPl5BU/KwCgcQMP6YHfLPHapaXZvXP67j:bOWN7USgo6wPHa4pvXP
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6893c43c6ac63bd597b3240037c8bd9c_JaffaCakes118
Files
-
6893c43c6ac63bd597b3240037c8bd9c_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bfxq Size: 541B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE