CcfZASHbgfDsbf
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_1f2c481cfee417256b9efdf1bacc922d8ae42f0281c2ff0056062d7595699901.dll
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_1f2c481cfee417256b9efdf1bacc922d8ae42f0281c2ff0056062d7595699901
-
Size
184KB
-
MD5
11a27d72104b51f8f6f1464ec580189b
-
SHA1
bea6f35aca50b8f8e1292456d8d35eb86748bc00
-
SHA256
1f2c481cfee417256b9efdf1bacc922d8ae42f0281c2ff0056062d7595699901
-
SHA512
ad444a4edf2e7ec87fde730b7cc365d0c8939000e407d558d06eb81148641c740615b826fc59c8c0d04588328245b6d89e74a2c4405da4af527f20cd743ce725
-
SSDEEP
3072:NiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoLlzoxss7:NiLVCIT4WK2z1W+CUHZj4Skq/eaoxoC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_1f2c481cfee417256b9efdf1bacc922d8ae42f0281c2ff0056062d7595699901
Files
-
JaffaCakes118_1f2c481cfee417256b9efdf1bacc922d8ae42f0281c2ff0056062d7595699901.dll windows:5 windows x86 arch:x86
a6c7b0565586da90275c69f4b084ce85
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
advapi32
RegLoadAppKeyA
RegisterEventSourceW
user32
ShowOwnedPopups
gdi32
GetFontData
oleaut32
VarBstrFromDec
msvcrt
memset
kernel32
LoadLibraryExA
GetModuleHandleW
GetModuleFileNameA
Exports
Exports
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 124KB - Virtual size: 121KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ