Behavioral task
behavioral1
Sample
a7f1e021a9a617cfe851b67552ca1dbe_JaffaCakes118.dll
Resource
win7-20240705-en
General
-
Target
a7f1e021a9a617cfe851b67552ca1dbe_JaffaCakes118
-
Size
154KB
-
MD5
a7f1e021a9a617cfe851b67552ca1dbe
-
SHA1
261400724389e07f16a84f35f03473b67c62929f
-
SHA256
7aaface815698cd848bce04c88c62fef02232a1ae430b421e08afe7bb5802a44
-
SHA512
34d0fb437da838524ff15c4118958c92117a20c5d51596122c8e88e03eb4a49c9da5d5fab4f8883dbd856f64cfd7087d5c78ff0db74705c5b3ffb4888e23b5b6
-
SSDEEP
3072:xJ6Hkd6umZ9zvsMA3oXeqGsUEYdjE/ei+uYNVdMdRVvzoodmix4:RE7ZxvsMo0Klsei+RVdORxzjwn
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource a7f1e021a9a617cfe851b67552ca1dbe_JaffaCakes118 unpack001/out.upx
Files
-
a7f1e021a9a617cfe851b67552ca1dbe_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 75KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 62KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ