Behavioral task
behavioral1
Sample
d9eb171b826cb6f228dff32ade540e57_JaffaCakes118.dll
Resource
win7-20240903-en
General
-
Target
d9eb171b826cb6f228dff32ade540e57_JaffaCakes118
-
Size
31KB
-
MD5
d9eb171b826cb6f228dff32ade540e57
-
SHA1
02ec4575e5df3d4f43ed6d11e5a2e59afa10f457
-
SHA256
f4c774ba4b5e44b03cf8f72e5f1336ac23aa7f7e22162dd8e4801b601fc83404
-
SHA512
83fa88c83c3dcfe34b3ef0c2f7d6be190bf8d597648839dd265e7b12cd2725d623a68e87a6e36a9fcd11092b7a2a04e1b95b9f5b1f6357711ade875516760ad9
-
SSDEEP
768:TkFjzi7KEp4nfdfKq/8Lqw8H8NJO7KygiVnbcuyD7Ur:TcC7K64fzwElGhknouy8r
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d9eb171b826cb6f228dff32ade540e57_JaffaCakes118
Files
-
d9eb171b826cb6f228dff32ade540e57_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE