MyLove
Behavioral task
behavioral1
Sample
c0d0dda77e97661996a8e0a2000575c2_JaffaCakes118.dll
Resource
win7-20240708-en
General
-
Target
c0d0dda77e97661996a8e0a2000575c2_JaffaCakes118
-
Size
21KB
-
MD5
c0d0dda77e97661996a8e0a2000575c2
-
SHA1
2b07613a5b593dde4cca9cc446b60190603ac00c
-
SHA256
5e3343fe2f6547f2d467913ea65f76819a0f2c0d68ba8a951ae3488cf7f89580
-
SHA512
a6669159b927a7d92df5e84760346b6cfc730bae50bfb7a64f6b9bdc3224f8929f71757d1948ab3522ec265989f12534b868750bab05899c3256d133ab019920
-
SSDEEP
384:HLWCpCJ6xhNN8S0gPW2KUCphaMTaR3ItDCuV9UAvdOh+/3o:rzZtN8SVKUCpJTaItO4U6di+/
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c0d0dda77e97661996a8e0a2000575c2_JaffaCakes118
Files
-
c0d0dda77e97661996a8e0a2000575c2_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
UPX0 Size: - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kmpe Size: 553B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE