MyLove
Behavioral task
behavioral1
Sample
07add228044c248a37dc854b84980c63_JaffaCakes118.dll
Resource
win7-20240903-en
General
-
Target
07add228044c248a37dc854b84980c63_JaffaCakes118
-
Size
21KB
-
MD5
07add228044c248a37dc854b84980c63
-
SHA1
559eefe6da3396322dab648aa4c80e7fa0bbdf69
-
SHA256
c4ceac40ad34af25126cc5a2ccaa48b21dcbc256f5bcdd25ced25732e1411e05
-
SHA512
96c5d0302af337c743cd669bbf49318795f17f895d1d1412a45e7db4318d4c9a1920d4f98807c8eb233339bf8b5448b02ad5402bb787a712e0ab0479b67cd543
-
SSDEEP
384:2LWCpCJ6x37z8MxLvLW9GhOEv+fmuhx+VqC0eWPpnwDL9ADemjx5uo:UzZhFxLDW9Gc9fmuhxKqCCyL93mP
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07add228044c248a37dc854b84980c63_JaffaCakes118
Files
-
07add228044c248a37dc854b84980c63_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
UPX0 Size: - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bbhr Size: 542B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE