Behavioral task
behavioral1
Sample
dfbd8a1fd132dcf8f986ff315b23f124_JaffaCakes118.dll
Resource
win7-20240708-en
General
-
Target
dfbd8a1fd132dcf8f986ff315b23f124_JaffaCakes118
-
Size
50KB
-
MD5
dfbd8a1fd132dcf8f986ff315b23f124
-
SHA1
0d672e67ad3c2e67c5dd67a5ea1fea1b5e00fb38
-
SHA256
5aa116301ba4ef82e4dc1d4b3769e2ed0161e34967b3dd020c4a7e395c869193
-
SHA512
d1e03869d8fbdc696e3727cd9cf14d78f9a34f35599e414b351ad57d29cb9b541fc691d226fe93354cbe760419579a768affc19bc06446fdad65319ade59eabb
-
SSDEEP
768:CMjW0qEkicjX++cMkL78cZ/F/5WPYW+aGGt5W4JYajvelEIZ6fnbcuyD7U:U6p+cxLIc7/0PYW+aGV4JjC6fnouy8
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dfbd8a1fd132dcf8f986ff315b23f124_JaffaCakes118
Files
-
dfbd8a1fd132dcf8f986ff315b23f124_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 112KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 48KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE