Run
Behavioral task
behavioral1
Sample
d9f9700b1a57eb6db57d0735b6a721ec_JaffaCakes118.dll
Resource
win7-20240903-en
General
-
Target
d9f9700b1a57eb6db57d0735b6a721ec_JaffaCakes118
-
Size
33KB
-
MD5
d9f9700b1a57eb6db57d0735b6a721ec
-
SHA1
fd5333da77ee1f3e540f0bdffa359fe4d06f11ee
-
SHA256
12ba9764bea56a0ca5e5e3a83b7806a577365b82f7a84b777f4a5411633ed992
-
SHA512
a5558aab0de84362456df4fb6288248b278465f8d9596087cead88ef14ba8a83cc854ed2836012599cca9c1734be21f5d85da11ec9d281ed43ba01a2b2d5bb8a
-
SSDEEP
768:LgK8hSw7EFnbAXxsSxPQ7uTJpibQWLQRMO6uNYz:L3yEFb6kaT/i3LQRMRuN
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource d9f9700b1a57eb6db57d0735b6a721ec_JaffaCakes118 unpack001/out.upx
Files
-
d9f9700b1a57eb6db57d0735b6a721ec_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ