Behavioral task
behavioral1
Sample
128170803c5064a69ffa4b56484a2230_JaffaCakes118.dll
Resource
win7-20240903-en
General
-
Target
128170803c5064a69ffa4b56484a2230_JaffaCakes118
-
Size
89KB
-
MD5
128170803c5064a69ffa4b56484a2230
-
SHA1
d1043d187189bf48dcdbf16b4069d78820854303
-
SHA256
080a74858eab5bcb395d4f5fa45a12b2c42bc26ec6e1c172c242ac49e2a5f074
-
SHA512
21f5e0c439bd689ca9afb93f5996831de67a3cb8f003e04fc3c48b8b7b75d6bd9e8418e63b391aaf114d17ae170d0cea0cb02093e878b9c5a6e181819c883ace
-
SSDEEP
1536:aEZoegasKOp9GbFbD/cWGa4nVVfvaujUxbYKJzvJb14iUgjE844Bzfq6154GcBSI:aEZQasrm5D/cVj/dPKJzRb14ihg844Bo
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule sample acprotect -
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 128170803c5064a69ffa4b56484a2230_JaffaCakes118 unpack001/out.upx
Files
-
128170803c5064a69ffa4b56484a2230_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 81KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 66KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ