DllRegisterServer
Static task
static1
Behavioral task
behavioral1
Sample
52f8f4b8062bb6d5c3d83491fc2464c6_JaffaCakes118.dll
Resource
win7-20240708-en
General
-
Target
52f8f4b8062bb6d5c3d83491fc2464c6_JaffaCakes118
-
Size
402KB
-
MD5
52f8f4b8062bb6d5c3d83491fc2464c6
-
SHA1
afac7aff861465bcfb13b5a8c39341a7bcdd7123
-
SHA256
11d1581869bc156c72e8ef01df835398f8c054a70c81a76fd1a7825a148db271
-
SHA512
81dace87be97711aaf6cef307a31e6b7fb923c57dd8119de79d6638bf119a2fea0898da40cdbcb9010ab467be03f237028c02d67c9b0b99e96e34bfa4eca6fc7
-
SSDEEP
6144:JyPKmlEwrPmRPWEpWFn2E6lyDntvhhOU35RJEesNT3wU7HuAm:tTwr03pdf8vhhOKJET5By
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 52f8f4b8062bb6d5c3d83491fc2464c6_JaffaCakes118
Files
-
52f8f4b8062bb6d5c3d83491fc2464c6_JaffaCakes118.dll regsvr32 windows:4 windows x86 arch:x86
300c10a50c3de5414c631eda8f77fc0f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
VirtualAlloc
VirtualProtect
GetProcAddress
lstrcmpA
lstrlenA
msimg32
DllInitialize
oleacc
GetRoleTextA
oleaut32
ClearCustData
Exports
Exports
Sections
.code Size: 323KB - Virtual size: 322KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 81B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 77KB - Virtual size: 77KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE