F1122
Behavioral task
behavioral1
Sample
02414b8c8614cbea63c8afd03332d9bb_JaffaCakes118.dll
Resource
win7-20240708-en
General
-
Target
02414b8c8614cbea63c8afd03332d9bb_JaffaCakes118
-
Size
199KB
-
MD5
02414b8c8614cbea63c8afd03332d9bb
-
SHA1
690c74e7a7bb474403fc063084a1a016d0dd2057
-
SHA256
374489a40de6ef4f4c16a131f359684f200a5522dc09f084fe6fe077641ad1ac
-
SHA512
53fe3940a7b9e6b0219788f9d9dbc5939fe8a0f40d16e7652aa6aba9a2ef0d6ae305d69f5fccdf817fbdeca6eb95360a31c718f6cd1f7f51110f134a911a5f17
-
SSDEEP
6144:5vrocDbHV5IVmHoub7LdD2XrP0L3Be4BoSm:5vMcH15No8LdaLee2oS
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02414b8c8614cbea63c8afd03332d9bb_JaffaCakes118
Files
-
02414b8c8614cbea63c8afd03332d9bb_JaffaCakes118.dll windows:7 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE