CoRegCleanup
Static task
static1
Behavioral task
behavioral1
Sample
a2587bc8bb7c2fd252a6c7d6387413e2_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a2587bc8bb7c2fd252a6c7d6387413e2_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
a2587bc8bb7c2fd252a6c7d6387413e2_JaffaCakes118
-
Size
150KB
-
MD5
a2587bc8bb7c2fd252a6c7d6387413e2
-
SHA1
6d773401a08868c2641b8e188cd7b8c7d45273f1
-
SHA256
e219bc06b81aab34a28e9d418a4ea3b60c733aaaba47d705d015f7fb77997bca
-
SHA512
98c96e5d0c94c56b320019d14058d0a304d4f615f1313074e054e9d9c10b8295741060dd9d6cf7e2de5e878491bd82a8f4fb55cc5e49db7e984c752f85a3d3e7
-
SSDEEP
3072:GGZHkVtZMPgteL8iXcZrLrbORf+m+cB9FgA0CbGM0QoWYNYDuq:GwHklsQiXcZmRf+DcB7g8qM0QKY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a2587bc8bb7c2fd252a6c7d6387413e2_JaffaCakes118
Files
-
a2587bc8bb7c2fd252a6c7d6387413e2_JaffaCakes118.dll windows:4 windows x86 arch:x86
4da75da4dcae78d88a62c34f7b11d04b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
ExitProcess
GetACP
GetModuleHandleA
GetOEMCP
GetStartupInfoA
HeapAlloc
HeapCreate
TlsSetValue
lstrcpynA
msvcrt
vswprintf
_XcptFilter
__p__commode
__set_app_type
rand
fwprintf
_except_handler3
_exit
user32
CreateIconIndirect
SetCapture
oleaut32
OleLoadPicturePath
ClearCustData
shlwapi
SHDeleteValueA
SHQueryInfoKeyA
SHSetValueA
Exports
Exports
Sections
.text Size: 71KB - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 73KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ