MyLove
Behavioral task
behavioral1
Sample
dcc6a7fb39744dce799b0da0911d26a5_JaffaCakes118.dll
Resource
win7-20240903-en
General
-
Target
dcc6a7fb39744dce799b0da0911d26a5_JaffaCakes118
-
Size
22KB
-
MD5
dcc6a7fb39744dce799b0da0911d26a5
-
SHA1
b78abf3a6718f0fe0ff164c1d9158765a4fbcae6
-
SHA256
cebe763c049b97222dc59b7091ebee1706620a14adee1c8fe2e494accbf51ba0
-
SHA512
3f8f35753fd94c0689f8c5e1bd87c4e940003c666abc3d0db26f0b1b5611ec818835d862a2605076965cc1dc5aaed8100ab13284a6d53e6b2b3b15f03fe80d32
-
SSDEEP
384:6LWCpCJ6x3H747WWnuyb6ldYPVhE11uiioMqz9bYK7n7Ey6hglwo:AzZhH7ab63YPVhXiiP2BXcy6hu
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dcc6a7fb39744dce799b0da0911d26a5_JaffaCakes118
Files
-
dcc6a7fb39744dce799b0da0911d26a5_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
UPX0 Size: - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cxux Size: 567B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE