Behavioral task
behavioral1
Sample
eb0640031631febff21cd033a18b7a18_JaffaCakes118.dll
Resource
win7-20240903-en
General
-
Target
eb0640031631febff21cd033a18b7a18_JaffaCakes118
-
Size
278KB
-
MD5
eb0640031631febff21cd033a18b7a18
-
SHA1
91b32f81faf50eecba17fc8e24aa49f877871942
-
SHA256
fcff1613ea8b7371a504287e3fb85ff0a5cf69347ea70bef35462ad948feb150
-
SHA512
6deef43e068722f0825ef988683fa1cbd0cf94566ee1dced74f358e2fb1b2e511ebdeaded9b00e3caf6900ee433f49cc936896596270c964cb75ec6d65639b11
-
SSDEEP
6144:BOPZQGmlz6vSoxUlkAVb7g5hO7oAko53sjSZqnVaRUVMPF3oSZ:BmZQBlz61UVVbFc+wSoVaGMF3oSZ
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb0640031631febff21cd033a18b7a18_JaffaCakes118
Files
-
eb0640031631febff21cd033a18b7a18_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 368KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 274KB - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE