Static task
static1
Behavioral task
behavioral1
Sample
0cc7af63e6b7bb5786a883cc88d84c0f_JaffaCakes118.dll
Resource
win7-20240419-en
General
-
Target
0cc7af63e6b7bb5786a883cc88d84c0f_JaffaCakes118
-
Size
296KB
-
MD5
0cc7af63e6b7bb5786a883cc88d84c0f
-
SHA1
62081e06d03f6332db9d6fb69fc920c887d1fb45
-
SHA256
de71238112f239dc2aadbad129db8beb45a64a5e3da042929a7b85480fdd11a1
-
SHA512
f6add26b1ed9d6aebff04731153ae75cf408742dbf8a706f8b87b1ed6d8bc4f4bfdd8df83bc003548c7b6ebfafaa1cdf3233f9aeaf1e83fab4a11e66a71e98c5
-
SSDEEP
6144:gX0++0XgkCbjM69qzmyEuoUvcEfjQ026I8ZCovc5tffn:0P6JqOnScOjQ/ICovcb3n
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 0cc7af63e6b7bb5786a883cc88d84c0f_JaffaCakes118
Files
-
0cc7af63e6b7bb5786a883cc88d84c0f_JaffaCakes118.dll windows:5 windows x86 arch:x86
cfb5a39339eca93934bab2feba025518
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
crypt32
CryptInstallOIDFunctionAddress
advapi32
RegCloseKey
user32
GetFocus
kernel32
LoadLibraryW
GetModuleHandleA
oleaut32
GetRecordInfoFromTypeInfo
Sections
.text Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 910B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 260KB - Virtual size: 262KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 952B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 208B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ