Behavioral task
behavioral1
Sample
0cc7ba5172a2f0c915bba2b91086cbe2_JaffaCakes118.dll
Resource
win7-20240903-en
General
-
Target
0cc7ba5172a2f0c915bba2b91086cbe2_JaffaCakes118
-
Size
11KB
-
MD5
0cc7ba5172a2f0c915bba2b91086cbe2
-
SHA1
d2ab242dcda1210182274a20e88fc8f33dfbbb27
-
SHA256
c0de605bfd93237072d4b7824a1ccdd9aac9f0453e08be7cb4e3cf26bda80510
-
SHA512
3379250fb8a581fbae169fa0a0d3e8fcc6fb55fa69485422c0723c6917a567ba3bf967cf4356e6455a411187518fd145b0ee2f2d61bf7fcb70c5cf832bc8c1e0
-
SSDEEP
192:+SCOiNXWuYXMBsXSiMfx6+VUiMshyo03bURF+1i6vryA8IPAfAh7EVM2hqIUmrn:+SCOi5WuViMHgZo0w3832A8IImH2jn
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 0cc7ba5172a2f0c915bba2b91086cbe2_JaffaCakes118 unpack001/out.upx
Files
-
0cc7ba5172a2f0c915bba2b91086cbe2_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ