Static task
static1
Behavioral task
behavioral1
Sample
b669eee07f65129967f9414ce64cd5308a79ad32eb3d38bc2bf96691401483c5.dll
Resource
win7-20240708-en
General
-
Target
JaffaCakes118_a210524f979bf76e29b80555a64ce35251c3b60b5379aa72d6ed4da29d4fad13
-
Size
250KB
-
MD5
97954fe93bc805182968fc51121f6737
-
SHA1
931ef6919306a690afad866e8a762d6d1d320234
-
SHA256
a210524f979bf76e29b80555a64ce35251c3b60b5379aa72d6ed4da29d4fad13
-
SHA512
2627966c7d9f026f8b1d58daeab8ced3f87ba89ff9eac4075657d61546020ee97d05ccfd3024b72083b7388c36622bee7b79bbb03b2c720ad9736e6171bfccb3
-
SSDEEP
6144:KigCaUaCdLqZgm8CBYaSvHJ8mtx5dQnQxp:rgCa9CdOJKpBMQxp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/b669eee07f65129967f9414ce64cd5308a79ad32eb3d38bc2bf96691401483c5
Files
-
JaffaCakes118_a210524f979bf76e29b80555a64ce35251c3b60b5379aa72d6ed4da29d4fad13.zip
-
b669eee07f65129967f9414ce64cd5308a79ad32eb3d38bc2bf96691401483c5.dll windows:5 windows x86 arch:x86
029de42e3530de9cd6477f284ea6c70a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
iphlpapi
NotifyRouteChange
oleaut32
VarUI2FromStr
rpcrt4
RpcBindingFromStringBindingA
NdrSimpleTypeUnmarshall
user32
GetWindowTextA
DrawFrameControl
shlwapi
SHDeleteValueA
advapi32
GetNumberOfEventLogRecords
RegOpenKeyA
GetServiceKeyNameA
SaferCreateLevel
kernel32
SetLocaleInfoW
lstrlenW
ConvertFiberToThread
SetConsoleDisplayMode
GetBinaryTypeW
GetModuleFileNameW
GetModuleHandleW
ReadConsoleOutputW
WriteConsoleOutputAttribute
Sections
.text Size: 216KB - Virtual size: 215KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 172KB - Virtual size: 171KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 64KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ