Behavioral task
behavioral1
Sample
6a82bb43d9b592f74a9a07b194a1aeae_JaffaCakes118.dll
Resource
win7-20240708-en
General
-
Target
6a82bb43d9b592f74a9a07b194a1aeae_JaffaCakes118
-
Size
98KB
-
MD5
6a82bb43d9b592f74a9a07b194a1aeae
-
SHA1
34137f302e80ee4089c43ecfc2e43a435e3a0630
-
SHA256
fb2fb44b6ab9e5a334b17e2a82f4b2d5f011613446e9f4a9a71872d930ba7ade
-
SHA512
26e4a2f1fa35fa6dfecb5970ffe7654ddfe570781747117ba477c46d5e67c1adac1521d0c03065ff960dc699f1d1f1bafb49bd1963381447a76eaf8d2c622511
-
SSDEEP
3072:w+kzP8jTKXr/6XafoKyIP0NtZYrL3+/WnGsPOE:lalXr/yKxymEkvV
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a82bb43d9b592f74a9a07b194a1aeae_JaffaCakes118
Files
-
6a82bb43d9b592f74a9a07b194a1aeae_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 68KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE