Behavioral task
behavioral1
Sample
09612f9c97c50d5dcbaf2feb44bf741f_JaffaCakes118.dll
Resource
win7-20240903-en
General
-
Target
09612f9c97c50d5dcbaf2feb44bf741f_JaffaCakes118
-
Size
276KB
-
MD5
09612f9c97c50d5dcbaf2feb44bf741f
-
SHA1
41ac84f52d8719320365a5e54f0aca02b0d5ab5c
-
SHA256
c99333cd3619e5db5ee56b0d3db1cbee0ecec36ac9e85c4c680da084420408ac
-
SHA512
52d7c6c65d67e7928afa1c4c8f305e75e22507705b12f013a4b77f6c71313a2ff6c85e7e346705d25da0e8298891f7662dd60c7e2d88a6d580f5976bb74d6ab2
-
SSDEEP
6144:PdmBZ0TffDTW5hVYsKH9VPuhqibFJbxilZrwwdOCoST:PdmmDTChCsmPxIJbxilROCoST
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09612f9c97c50d5dcbaf2feb44bf741f_JaffaCakes118
Files
-
09612f9c97c50d5dcbaf2feb44bf741f_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 364KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 273KB - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE