DllRegisterServer
Behavioral task
behavioral1
Sample
JaffaCakes118_8c561845081359c179efba4fa3de9b0536d6f8b7d4b392a73d38886ad066f37e.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_8c561845081359c179efba4fa3de9b0536d6f8b7d4b392a73d38886ad066f37e.dll
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_8c561845081359c179efba4fa3de9b0536d6f8b7d4b392a73d38886ad066f37e
-
Size
10KB
-
MD5
4ddee1ac9c1ba82a52d66661040e8e8f
-
SHA1
3b672edc1d5f594cc764c088e561c65ebfa63bbb
-
SHA256
8c561845081359c179efba4fa3de9b0536d6f8b7d4b392a73d38886ad066f37e
-
SHA512
516d8bb8ea540b9d1a08e66f1878f925bdd3c206c038b93cd7ef699e01597fea50533ea6a10b4affd95c552782dfd0c244e0840e408f96158354439d2a8f8386
-
SSDEEP
192:oA2vUz9V5Znb4/bxJBJTFpmwAE7BPki7r:oBUzj5Zn61JB9mwAwt7r
Malware Config
Extracted
icedid
2811148672
apoxiolazio55.space
Signatures
Files
-
JaffaCakes118_8c561845081359c179efba4fa3de9b0536d6f8b7d4b392a73d38886ad066f37e.dll regsvr32 windows:6 windows x64 arch:x64
a121b662c147e7c0556377c2789eb869
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
shell32
SHGetFolderPathA
user32
wsprintfA
wsprintfW
advapi32
GetUserNameA
LookupAccountNameW
kernel32
CreateProcessA
CreateDirectoryA
GetComputerNameExA
GetTempPathA
GetProcAddress
Sleep
CreateThread
ExitProcess
WriteFile
CreateFileA
CloseHandle
HeapFree
HeapReAlloc
HeapAlloc
GetProcessHeap
GetComputerNameExW
GetTickCount64
GetLastError
LoadLibraryA
SwitchToThread
lstrcatA
lstrcpyA
winhttp
WinHttpQueryDataAvailable
WinHttpConnect
WinHttpSetStatusCallback
WinHttpSendRequest
WinHttpCloseHandle
WinHttpSetOption
WinHttpOpenRequest
WinHttpReadData
WinHttpQueryHeaders
WinHttpOpen
WinHttpReceiveResponse
WinHttpQueryOption
msvcrt
memset
memcpy
Exports
Exports
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
bss Size: - Virtual size: 8B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 128B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 228B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ