CcfZASHbgfDsbf
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_c9cbf7abbf7a0b890ee0138c81747df8d5a5527d9a93f3452a518cfc8737a5f3.dll
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_c9cbf7abbf7a0b890ee0138c81747df8d5a5527d9a93f3452a518cfc8737a5f3
-
Size
184KB
-
MD5
2f07b137047b1b7d0e274c33b05ec90d
-
SHA1
7277433691a3de9cfd7e1776b808b0d9d283a6b7
-
SHA256
c9cbf7abbf7a0b890ee0138c81747df8d5a5527d9a93f3452a518cfc8737a5f3
-
SHA512
37582badb6c8118a915dc5af1103f727816634251ffff1093840f0f3c27152d71c611f32d1e2cf1d0476efcc0655c027efeaa7a5d2ae2197b97c4a6697520bd9
-
SSDEEP
3072:siLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoHlzoxss7:siLVCIT4WK2z1W+CUHZj4Skq/eao1oC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_c9cbf7abbf7a0b890ee0138c81747df8d5a5527d9a93f3452a518cfc8737a5f3
Files
-
JaffaCakes118_c9cbf7abbf7a0b890ee0138c81747df8d5a5527d9a93f3452a518cfc8737a5f3.dll windows:5 windows x86 arch:x86
a6c7b0565586da90275c69f4b084ce85
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
advapi32
RegLoadAppKeyA
RegisterEventSourceW
user32
ShowOwnedPopups
gdi32
GetFontData
oleaut32
VarBstrFromDec
msvcrt
memset
kernel32
LoadLibraryExA
GetModuleHandleW
GetModuleFileNameA
Exports
Exports
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 124KB - Virtual size: 121KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ