MyLove
Behavioral task
behavioral1
Sample
decdcb7a45d33c6138283da771e8c290_JaffaCakes118.dll
Resource
win7-20240903-en
General
-
Target
decdcb7a45d33c6138283da771e8c290_JaffaCakes118
-
Size
16KB
-
MD5
decdcb7a45d33c6138283da771e8c290
-
SHA1
7f9e7e63a56b86563c7b5fc8222211ad5a7a7b87
-
SHA256
991564c017c469825cf946fa2aa19f4caff186c6150e4c20b29c144011bee029
-
SHA512
a6bd3ef96be213336c701e3bfa4db10bc04ad643ffe4e6c3da3056edbc74e408ae68d4559bd70c980b3e98fc53ae83fb9f4362028132a9914e7d8aa5fe1d389b
-
SSDEEP
384:9ZgWPl5BU/KwAamEUjXcaWCBezhnrwFF5raKDlTW:9OWN7UwPHOCoNnrwFF5r9
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource decdcb7a45d33c6138283da771e8c290_JaffaCakes118
Files
-
decdcb7a45d33c6138283da771e8c290_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mkgh Size: 623B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE