CcfZASHbgfDsbf
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_b26ac37a76abd546e96a472abf8c11b676c57c8c5b3976bb73cf47a3084ab14f.dll
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_b26ac37a76abd546e96a472abf8c11b676c57c8c5b3976bb73cf47a3084ab14f
-
Size
184KB
-
MD5
80a8cf881cd235ad7e8a72d792466b69
-
SHA1
c0d83fe88c762c5bdbb16c156069ff10da2cb5a8
-
SHA256
b26ac37a76abd546e96a472abf8c11b676c57c8c5b3976bb73cf47a3084ab14f
-
SHA512
2e601218c0efbb16f9699c4796642bdd18f7b2c3a13c3595ec243ac20f06be43c5329f1ca6db2e1211d90705b5f2fb89ca038fbebefc0e89bf63f5782c4b6cc3
-
SSDEEP
3072:liLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoJlzoxss7:liLVCIT4WK2z1W+CUHZj4Skq/eaoXoC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_b26ac37a76abd546e96a472abf8c11b676c57c8c5b3976bb73cf47a3084ab14f
Files
-
JaffaCakes118_b26ac37a76abd546e96a472abf8c11b676c57c8c5b3976bb73cf47a3084ab14f.dll windows:5 windows x86 arch:x86
a6c7b0565586da90275c69f4b084ce85
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
advapi32
RegLoadAppKeyA
RegisterEventSourceW
user32
ShowOwnedPopups
gdi32
GetFontData
oleaut32
VarBstrFromDec
msvcrt
memset
kernel32
LoadLibraryExA
GetModuleHandleW
GetModuleFileNameA
Exports
Exports
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 124KB - Virtual size: 121KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ