CcfZASHbgfDsbf
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_fe051686c6cd43bbbce7bcffac3c54b32d7d89f5c9ce6cd600904d1e60d1bd75.dll
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_fe051686c6cd43bbbce7bcffac3c54b32d7d89f5c9ce6cd600904d1e60d1bd75
-
Size
184KB
-
MD5
483c680325af0a220f6e1eb90d341892
-
SHA1
55da77b48d238f49e993592dd533e9ab9c761bda
-
SHA256
fe051686c6cd43bbbce7bcffac3c54b32d7d89f5c9ce6cd600904d1e60d1bd75
-
SHA512
a216f41ef76e77549424ea30e375644cef35fc1f5e1841f277ba9c8ceb333ca1c8c50791e1327b020834c7faedd7f18c3a13068ab25cd186455a91686c81e650
-
SSDEEP
3072:FiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoLlzoxss7:FiLVCIT4WK2z1W+CUHZj4Skq/eaoxoC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_fe051686c6cd43bbbce7bcffac3c54b32d7d89f5c9ce6cd600904d1e60d1bd75
Files
-
JaffaCakes118_fe051686c6cd43bbbce7bcffac3c54b32d7d89f5c9ce6cd600904d1e60d1bd75.dll windows:5 windows x86 arch:x86
a6c7b0565586da90275c69f4b084ce85
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
advapi32
RegLoadAppKeyA
RegisterEventSourceW
user32
ShowOwnedPopups
gdi32
GetFontData
oleaut32
VarBstrFromDec
msvcrt
memset
kernel32
LoadLibraryExA
GetModuleHandleW
GetModuleFileNameA
Exports
Exports
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 124KB - Virtual size: 121KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ