TyreDokgW
Static task
static1
Behavioral task
behavioral1
Sample
575874452154518937779ef801d942d1d8637057ddd0d205ac51dc8eeac82dc3.dll
Resource
win7-20240729-en
General
-
Target
JaffaCakes118_f769cda26a6a7a249233189bb477934a7edc29a2a72c9cc42b8fbca652882475
-
Size
298KB
-
MD5
870d390d882d80ad2145aa52590caa5e
-
SHA1
e39d702a6d475d6d9196db9c7fc1ccb881e6c226
-
SHA256
f769cda26a6a7a249233189bb477934a7edc29a2a72c9cc42b8fbca652882475
-
SHA512
aae71d85b7edd285622a31baf3db97c3fc3769864565e49b104de8a1a635963d5007d8e5b9f8e18c78dbd3ba170f046c92ad286dce735b64fa4911ee1752bf31
-
SSDEEP
6144:738iYVOIzE4iqRXv02EzUcFLxjTgF+CtZzBc9E4QVaRolc2R:738nVtisv05BEtZz2GVaReTR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/575874452154518937779ef801d942d1d8637057ddd0d205ac51dc8eeac82dc3
Files
-
JaffaCakes118_f769cda26a6a7a249233189bb477934a7edc29a2a72c9cc42b8fbca652882475.zip
Password: infected
-
575874452154518937779ef801d942d1d8637057ddd0d205ac51dc8eeac82dc3.dll windows:6 windows x86 arch:x86
fb977cca5ab6e3518daeffc3cdc0052a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetLastError
WaitForMultipleObjects
EnterCriticalSection
LeaveCriticalSection
GetCurrentThread
WaitForSingleObject
WideCharToMultiByte
InitializeCriticalSection
CreateFileA
DeleteCriticalSection
Exports
Exports
Sections
.text Size: 626KB - Virtual size: 626KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 474B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 188B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ