DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Resubmissions
20-07-2024 08:59
240720-kxyaqsyenb 6Static task
static1
1 signatures
General
-
Target
5fd6e21514aed6de7d0931eb55ff0ccd_JaffaCakes118
-
Size
404KB
-
MD5
5fd6e21514aed6de7d0931eb55ff0ccd
-
SHA1
7a69d342e0c28bd270eb5bc8e2f8bcdffaa189dd
-
SHA256
d668b77965b3a0200e41f93065a1a24e0084f53324ebb7f5d0dbbf9267e063b1
-
SHA512
dc34e138b61091677698e1c5d3956e53bab71e89320b230382f395a4fe063ff08335ab7fe14632f131bdd98c3ba275ea258b7a488cbf1c654515dd1d0a8c9d21
-
SSDEEP
6144:8/lVcEFGrARa6sKCGPyRxvTtR+2IdLtLqIdLtLNH3cS9S:8Y9AcKz6RxT+tHVS
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5fd6e21514aed6de7d0931eb55ff0ccd_JaffaCakes118
Files
-
5fd6e21514aed6de7d0931eb55ff0ccd_JaffaCakes118.dll regsvr32 windows:4 windows x86 arch:x86
85f01f1d84a740525f9f5ccda361a69b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetLastError
FindResourceW
LoadLibraryExW
GetModuleFileNameW
EnterCriticalSection
RaiseException
FreeLibrary
DeleteCriticalSection
lstrcmpiW
LeaveCriticalSection
InitializeCriticalSection
MultiByteToWideChar
LoadResource
GetModuleHandleW
InterlockedDecrement
GetProcAddress
LoadLibraryW
CloseHandle
DebugBreak
CreateFileA
SetEndOfFile
SizeofResource
FormatMessageW
HeapFree
GetProcessHeap
GlobalAlloc
Sleep
CreateThread
HeapAlloc
InterlockedIncrement
lstrlenW
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
SetStdHandle
CreateFileW
SetEnvironmentVariableW
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetStringTypeW
GetStringTypeA
GetConsoleMode
GetConsoleCP
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapReAlloc
VirtualProtect
VirtualAlloc
GetModuleHandleA
GetSystemInfo
VirtualQuery
GetCurrentThreadId
GetCommandLineA
RtlUnwind
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapSize
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
GetCPInfo
GetOEMCP
IsValidCodePage
LCMapStringA
WideCharToMultiByte
LCMapStringW
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetFilePointer
ReadFile
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LoadLibraryA
lstrlenA
user32
UnregisterClassA
ShowWindow
CharNextW
MessageBoxW
advapi32
RegOpenKeyExW
RegSetValueExW
RegQueryInfoKeyW
RegCloseKey
RegDeleteValueW
RegEnumKeyExW
RegDeleteKeyW
RegCreateKeyExW
RegQueryValueExW
ole32
CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc
StringFromGUID2
CreateStreamOnHGlobal
CoTaskMemRealloc
oleaut32
SysStringLen
VarUI4FromStr
UnRegisterTypeLi
RegisterTypeLi
LoadTypeLi
LoadRegTypeLi
VariantClear
VariantInit
SysFreeString
SysAllocString
shlwapi
StrToIntW
Exports
Exports
Sections
.text Size: 272KB - Virtual size: 269KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 100KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ