CcfZASHbgfDsbf
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_7b666277f290cebb16080b0a3e4a2682c78ca014dadab7c5f60fcc0239274fb5.dll
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_7b666277f290cebb16080b0a3e4a2682c78ca014dadab7c5f60fcc0239274fb5
-
Size
184KB
-
MD5
ea8664ff48f4fa8a8359fbfe80f42759
-
SHA1
be0ee2900829b0e5caa1667c07f7f5b49ecb0f59
-
SHA256
7b666277f290cebb16080b0a3e4a2682c78ca014dadab7c5f60fcc0239274fb5
-
SHA512
3f4f3d1d4bf94e5ab0d9d2f66fa1084d87e8f0b25851f810e06415a27106d22e73cc176719da665d441881f36c7d0129310516a5dd575e13292f816be9c4a5dc
-
SSDEEP
3072:piLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoFlzoxss7:piLVCIT4WK2z1W+CUHZj4Skq/eaoLoC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_7b666277f290cebb16080b0a3e4a2682c78ca014dadab7c5f60fcc0239274fb5
Files
-
JaffaCakes118_7b666277f290cebb16080b0a3e4a2682c78ca014dadab7c5f60fcc0239274fb5.dll windows:5 windows x86 arch:x86
a6c7b0565586da90275c69f4b084ce85
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
advapi32
RegLoadAppKeyA
RegisterEventSourceW
user32
ShowOwnedPopups
gdi32
GetFontData
oleaut32
VarBstrFromDec
msvcrt
memset
kernel32
LoadLibraryExA
GetModuleHandleW
GetModuleFileNameA
Exports
Exports
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 124KB - Virtual size: 121KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ