C:\Selling\Buying\Seeking.tfr
Static task
static1
Behavioral task
behavioral1
Sample
570c0372850d99db823de1a50f94f0bb_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
570c0372850d99db823de1a50f94f0bb_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
570c0372850d99db823de1a50f94f0bb_JaffaCakes118
-
Size
75KB
-
MD5
570c0372850d99db823de1a50f94f0bb
-
SHA1
4fd16276b65970dc3e4a9217e773c745250051ae
-
SHA256
db73d96e1ea0c22493139b92fad28241add4d119fb950d7720319077b73ce3e2
-
SHA512
12ef53d7ede535a696fa78b6c17a544d579e045f04ed9856a6482e8f35d8815799ec79ddb310fd98877d9d4d380a1094634f5cc74d8247f9d45031515de52d04
-
SSDEEP
768:caVFqDT1Hw+S/Jp1xY6Ai6YDBVT8dHMAiOY3YRcwRYLYUCZV2S5foiRr3BrrTTKt:caeXS9D3AijVUiR3GRWYx4055eaTPn9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 570c0372850d99db823de1a50f94f0bb_JaffaCakes118
Files
-
570c0372850d99db823de1a50f94f0bb_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Exports
Exports
CrtTimerExA@16
GenerateAppNameExA@16
IsObjectOriginal@12
ValidateVersionExA@12
RemovePath@4
DecrementPathExW@12
InstallHeightOld@12
CrtPathExW@8
ValidateAnchorW@16
DeleteTextW@8
Sections
.qhma Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.iJwkuN Size: 512B - Virtual size: 140B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bckf Size: 512B - Virtual size: 360B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.lYNrd Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.WrEjh Size: 512B - Virtual size: 54B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.NFX Size: 1024B - Virtual size: 813B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rvcGbk Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zoZn Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE