CcfZASHbgfDsbf
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_0a2df4fa2fbdfee7c42d3b7daa7cc616f2981d8257759152df8ddaebb606c319.dll
Resource
win7-20241023-en
General
-
Target
JaffaCakes118_0a2df4fa2fbdfee7c42d3b7daa7cc616f2981d8257759152df8ddaebb606c319
-
Size
184KB
-
MD5
1bbe18450110b46911ce7cc10108e9aa
-
SHA1
ac2d0ca757ccba7b8379c25fa93a67819d12faae
-
SHA256
0a2df4fa2fbdfee7c42d3b7daa7cc616f2981d8257759152df8ddaebb606c319
-
SHA512
f698040f8310a9df5a7726b2c54ba7ebae9764eee149aa0f0ea23a2e07c2eb06e55b4cd21f0e36f9eb64f31ef3b3f1cded6e7b52be61f4606a1a1536c682660d
-
SSDEEP
3072:+JQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8J/a//2uFrSc:HfYOX+wTScR/Xzku9LVwAuG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_0a2df4fa2fbdfee7c42d3b7daa7cc616f2981d8257759152df8ddaebb606c319
Files
-
JaffaCakes118_0a2df4fa2fbdfee7c42d3b7daa7cc616f2981d8257759152df8ddaebb606c319.dll windows:5 windows x86 arch:x86
1691313ae64e22216ac678d4d81d8bb7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryExA
GetModuleHandleW
GetModuleFileNameA
oleaut32
VarBstrFromDec
advapi32
RegLoadAppKeyA
RegisterEventSourceW
msvcrt
memset
user32
ShowOwnedPopups
gdi32
GetFontData
Exports
Exports
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 124KB - Virtual size: 122KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ