Behavioral task
behavioral1
Sample
8217635ae3034c186e586a2b23fddf1c_JaffaCakes118.dll
Resource
win7-20240705-en
General
-
Target
8217635ae3034c186e586a2b23fddf1c_JaffaCakes118
-
Size
38KB
-
MD5
8217635ae3034c186e586a2b23fddf1c
-
SHA1
391a56887c527d93efee29a3805fa9dd2a683585
-
SHA256
c24d5c77e8c093c15a3f7aaa3d1d26462a954110e39276b371619986bcc0a6d5
-
SHA512
f057a51a09f64a4cdb1b31a0fe069eb4b34e4cae1e40943d1867eef8a4211ccc522bd8c075e2054801ef4d1193094ce3fdc46a291bb6d04f928d08ec5b5442f3
-
SSDEEP
768:6LXoZUcilhUo10AycCFcxeaWgyVnab4P8xKyfg0a3+Y8FJTkldX:6LXobilhuUCFpJFcdJfg0O+9JadX
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8217635ae3034c186e586a2b23fddf1c_JaffaCakes118
Files
-
8217635ae3034c186e586a2b23fddf1c_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE