Behavioral task
behavioral1
Sample
bae69470223b2ee978c345ea1ae4c388_JaffaCakes118.dll
Resource
win7-20240729-en
General
-
Target
bae69470223b2ee978c345ea1ae4c388_JaffaCakes118
-
Size
98KB
-
MD5
bae69470223b2ee978c345ea1ae4c388
-
SHA1
70912024ad352fec1ca1576e1ec5d1adbf1fd535
-
SHA256
c61a35ecac051a1f2ce7c81df9a00be10911a1315e457d7827ada03703895b41
-
SHA512
273b2023a0159efc22af48f49f2110b83b470b41e390ca84995a8db0d67bc02c0268b73a17f1e91f92cc7db8d9c46dd3ae60b6714ddbeabc242231629654b34c
-
SSDEEP
3072:hx+Bv2nKrYdSu748eIJEdSNlYItyhJjm79hu:hnnKrFuEJ47Ntf9hu
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bae69470223b2ee978c345ea1ae4c388_JaffaCakes118
Files
-
bae69470223b2ee978c345ea1ae4c388_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 68KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE