CcfZASHbgfDsbf
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_5dba60b962e6b09516f054fdd3889d66aaafb93583da143003237acf59be20da.dll
Resource
win7-20241023-en
General
-
Target
JaffaCakes118_5dba60b962e6b09516f054fdd3889d66aaafb93583da143003237acf59be20da
-
Size
184KB
-
MD5
97772ffec3ae746c2fbcb643a869b3b9
-
SHA1
57d0fc33adfa9c9d8b9c82f3863ff56b143b8864
-
SHA256
5dba60b962e6b09516f054fdd3889d66aaafb93583da143003237acf59be20da
-
SHA512
948c41c750192ecb7afa6aebb037daa89f073755f6b32167e907992d3786f3b16a59fde4cec4a1486f119ba45d58ff9770163887c2bc4cc5a9643e5b4506d063
-
SSDEEP
3072:hiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eao/lzoxss7:hiLVCIT4WK2z1W+CUHZj4Skq/eaodoC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_5dba60b962e6b09516f054fdd3889d66aaafb93583da143003237acf59be20da
Files
-
JaffaCakes118_5dba60b962e6b09516f054fdd3889d66aaafb93583da143003237acf59be20da.dll windows:5 windows x86 arch:x86
a6c7b0565586da90275c69f4b084ce85
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
advapi32
RegLoadAppKeyA
RegisterEventSourceW
user32
ShowOwnedPopups
gdi32
GetFontData
oleaut32
VarBstrFromDec
msvcrt
memset
kernel32
LoadLibraryExA
GetModuleHandleW
GetModuleFileNameA
Exports
Exports
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 124KB - Virtual size: 121KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ