MyLove
Behavioral task
behavioral1
Sample
c949c57a382446860a028581edf07122_JaffaCakes118.dll
Resource
win7-20240708-en
General
-
Target
c949c57a382446860a028581edf07122_JaffaCakes118
-
Size
21KB
-
MD5
c949c57a382446860a028581edf07122
-
SHA1
6832d341b918bb9c53b71c7fb149d78159450f90
-
SHA256
617fbb95797cf2d17532bad4146cc1b50b3f38c5f41d92584720be3313fce558
-
SHA512
fb98f6953da3b9c5116466613f13489ecec3df64841a6f953e6b3057f64322ed8d81b7e27de4724ffaa668cb3bbd1a18d165362213fb0aca86d33f20b899ddfa
-
SSDEEP
384:2LWCpCJ6xhNN8S0gPW2KUCphaMTaR3ItDCuV9UAvdOh+/3o:UzZtN8SVKUCpJTaItO4U6di+/
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c949c57a382446860a028581edf07122_JaffaCakes118
Files
-
c949c57a382446860a028581edf07122_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
UPX0 Size: - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wmtx Size: 537B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE