DllRegisterServer
Static task
static1
Behavioral task
behavioral1
Sample
00f2c684e59164d887e54cbeec99b92a_JaffaCakes118.dll
Resource
win7-20240215-en
General
-
Target
00f2c684e59164d887e54cbeec99b92a_JaffaCakes118
-
Size
80KB
-
MD5
00f2c684e59164d887e54cbeec99b92a
-
SHA1
f2c84cfb2e5bc4612c2ad9fb250c81550361b1c6
-
SHA256
dbf032427e488cb9456c410f1bfdf3c47b8ad496fd18db34cf1c1d6573a966e6
-
SHA512
2020cf46734a1a4d11533a09744bd9692854463b072f46e423909d73c4f4aa11f5c2498f65ff970b1d0539c17deb87c88cc9fb6c81eee0b2c9feed15affbe196
-
SSDEEP
768:pWadwr+b2aikC6DwLUslDgXBpH/zuVQX9pzvjU4YqsABzktk42mWhlzS8q:75ikC6DwLUHfzDX9JU4YK83Az9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00f2c684e59164d887e54cbeec99b92a_JaffaCakes118
Files
-
00f2c684e59164d887e54cbeec99b92a_JaffaCakes118.dll regsvr32 windows:6 windows x64 arch:x64
4f0c2c904283b81b81368f0a41d1a1ac
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
shlwapi
StrStrA
Exports
Exports
Sections
.text Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 734B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 168B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ