CoRegCleanup
Static task
static1
Behavioral task
behavioral1
Sample
c1ac24759fc8842d0b71c862dad62e33_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c1ac24759fc8842d0b71c862dad62e33_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
c1ac24759fc8842d0b71c862dad62e33_JaffaCakes118
-
Size
159KB
-
MD5
c1ac24759fc8842d0b71c862dad62e33
-
SHA1
d77b130fbfacf4f741e228b2714bae71c98d9af5
-
SHA256
ce7fd55177174b9d2a80e21f08e3329bec35109823a66c7f38f0912aedcef948
-
SHA512
b681621ba2280ddca65032a7b76ba5f67a6acefbb01d569d279543e3f7fda59ddafb8515d14e8ec699b4c65f98dc9d91eb84efd6c76eb8b7aee3d7954e1a41dc
-
SSDEEP
3072:NGzYg6/Q3gaCcpKlGUavcipR2Ah6jvldsf6KlKLZ646UaoWD2G4U0:U0g6/Q3gad8lGUdMQvvld/KlkMWo/4U
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c1ac24759fc8842d0b71c862dad62e33_JaffaCakes118
Files
-
c1ac24759fc8842d0b71c862dad62e33_JaffaCakes118.dll windows:4 windows x86 arch:x86
625ef7bc55f8ee8defa75cc9fc7bf99b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
DuplicateHandle
ExitProcess
ExpandEnvironmentStringsA
FreeEnvironmentStringsW
GetACP
GetEnvironmentVariableA
GetModuleHandleA
GetOEMCP
GetStartupInfoA
GetSystemInfo
HeapAlloc
HeapCreate
IsValidCodePage
RaiseException
RtlUnwind
SetErrorMode
SetEvent
msvcrt
malloc
wcslen
_except_handler3
user32
LoadMenuA
SendMessageA
DeferWindowPos
DestroyIcon
GetFocus
oleaut32
SysReAllocString
VarBstrCat
SysFreeString
SafeArrayAllocDescriptor
SafeArrayAccessData
RevokeActiveObject
OleTranslateColor
OleLoadPicturePath
VarBstrCmp
OleIconToCursor
OleLoadPicture
shlwapi
PathFileExistsA
SHQueryInfoKeyA
StrChrA
StrRStrIA
StrToIntA
StrStrIA
PathBuildRootA
Exports
Exports
Sections
.text Size: 76KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 77KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ