DllRegisterServer1
Static task
static1
Behavioral task
behavioral1
Sample
a2bab5d62f55024cac8b77bd5bd06f83_JaffaCakes118.dll
Resource
win7-20240704-en
General
-
Target
a2bab5d62f55024cac8b77bd5bd06f83_JaffaCakes118
-
Size
212KB
-
MD5
a2bab5d62f55024cac8b77bd5bd06f83
-
SHA1
64338ff7b6c95115803eec3e87d80030b337ad82
-
SHA256
64b2e1c9d5950d69849696bb282aec4ea8d64329a664b575df8425497f6f861e
-
SHA512
5c7992f2ea39eb2d05d3aeee044ab76ed6ee0838aafaa8c0be7ce2d9d68202ba347effc598819c1a43e92246d0e7d7523dbdc97b9213783a0ead346392c86529
-
SSDEEP
3072:Kx56DIpGdEK91i6agC8yc1plSz2QGQebJIfUtBUsWTvdWAn6B:Kx0DIU1i655lSaQjuKfU/1WTvdWK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a2bab5d62f55024cac8b77bd5bd06f83_JaffaCakes118
Files
-
a2bab5d62f55024cac8b77bd5bd06f83_JaffaCakes118.dll windows:4 windows x86 arch:x86
898bdf0662e0301fbcdfff4df8626bb4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
VirtualAlloc
VirtualProtect
GetProcAddress
advapi32
A_SHAFinal
oleacc
ObjectFromLresult
imagehlp
SymFunctionTableAccess
Exports
Exports
Sections
.code Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 80B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 32.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 113KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE