MyLove
Behavioral task
behavioral1
Sample
aa6c9ed5bfc8a5f98d4136cf7c72d83b_JaffaCakes118.dll
Resource
win7-20240708-en
General
-
Target
aa6c9ed5bfc8a5f98d4136cf7c72d83b_JaffaCakes118
-
Size
16KB
-
MD5
aa6c9ed5bfc8a5f98d4136cf7c72d83b
-
SHA1
3ab22de31a7d306f2454354c7550819c10bc2b8b
-
SHA256
0246b07df83bf211c19514b4e9e0149dfbb0bbb9e22ddfa83d61df909b7065b2
-
SHA512
51ecc104d6756aeed47dbe1238a6f27efea43a856c5bd3e9aa362563f0a810177484639b340d374da5a697b3769ac6d6ca6b551e36a22437706883d635d9c9ca
-
SSDEEP
384:0ZgWPl5BU/KwAamEUjXcaWCBezhnrwFF5raKDlTW:0OWN7UwPHOCoNnrwFF5r9
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa6c9ed5bfc8a5f98d4136cf7c72d83b_JaffaCakes118
Files
-
aa6c9ed5bfc8a5f98d4136cf7c72d83b_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dfqt Size: 626B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE