Behavioral task
behavioral1
Sample
73fc79a731ba3fc8020add9d99629906_JaffaCakes118.dll
Resource
win7-20240708-en
General
-
Target
73fc79a731ba3fc8020add9d99629906_JaffaCakes118
-
Size
279KB
-
MD5
73fc79a731ba3fc8020add9d99629906
-
SHA1
8df9cbd72671c048b353eabc5c2f09c38a650b0f
-
SHA256
e0f81e8196523dcf58d3ea0fa6cab6ae968c64dfcb8afc47ca9df833b6cee6bb
-
SHA512
e4e7c7618541c675dd3f3e74cd1b8d37ff1e838dd92f738ae685b8685a56e7560f34a49ea577a24c8d90dd90d8963be112ec6eb285755790af7b01bfde00b064
-
SSDEEP
6144:FoP0TkddGUJOgUSKXQuwaTcEqP2b9W4GBs2SnbTk+MmKkFUyGoSY:7AHGQOzTwaTcEqPJaTUm7F+oSY
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 73fc79a731ba3fc8020add9d99629906_JaffaCakes118
Files
-
73fc79a731ba3fc8020add9d99629906_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 364KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 276KB - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE