PEiyiXwoD
Static task
static1
Behavioral task
behavioral1
Sample
25e4724a1fa36d91ea49d8622698d9e8_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
25e4724a1fa36d91ea49d8622698d9e8_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
25e4724a1fa36d91ea49d8622698d9e8_JaffaCakes118
-
Size
152KB
-
MD5
25e4724a1fa36d91ea49d8622698d9e8
-
SHA1
58ce4f040a6deef235e31351f8403e3a558e4abe
-
SHA256
d6a43a0a2da3e3922461473d3a3ad1899e819a8b0e1208f6e76c6bc1ef227be2
-
SHA512
c7edce5a59ed1ab828668948bcf355540f12534e1e8d91e5153253062f21b5fe7c2f608708cec03c3798549f3178abaceb0cd8fb8d2d01d03e8c2f8756659f79
-
SSDEEP
3072:H+3sKYiDuNcKhMeuT7zxV4EJ4AB4oU92jiO9UAE:HKdYiKNcAML4EJ4AB4oJ9UV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25e4724a1fa36d91ea49d8622698d9e8_JaffaCakes118
Files
-
25e4724a1fa36d91ea49d8622698d9e8_JaffaCakes118.dll windows:4 windows x86 arch:x86
2b90925e104f31f12c77b0b54db88fa2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetLastError
GetLocaleInfoW
user32
wsprintfA
FrameRect
ShowCaret
LoadStringA
advapi32
RegDeleteKeyA
RegCreateKeyExA
RegCloseKey
RegSetValueExA
RegOpenKeyExA
ole32
OleUninitialize
CoCreateInstance
OleInitialize
CoTaskMemFree
CoTaskMemAlloc
StringFromCLSID
msvcrt
strstr
memset
strlen
strcat
strcpy
printf
Exports
Exports
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 104KB - Virtual size: 420KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 912B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ