CcfZASHbgfDsbf
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_4001c9a47489c40bb2558796f6e4f5470fd6bff858b0e8f919a1f251938bd812.dll
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_4001c9a47489c40bb2558796f6e4f5470fd6bff858b0e8f919a1f251938bd812
-
Size
184KB
-
MD5
839d87ced22f43c61f1de60541589bff
-
SHA1
0c912716d9eeaac412e1d7b80d7ca3f7b78e9791
-
SHA256
4001c9a47489c40bb2558796f6e4f5470fd6bff858b0e8f919a1f251938bd812
-
SHA512
bc0a931f224fefe7376e60c79e2dddf2ef46c55f5ab9ceb561a1ac506eea77ec86bd422e68b8f1f5e19128748607cd2aa058e1c37cb1552671b0ad61d962e8cf
-
SSDEEP
3072:0iLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoLlzoxss7:0iLVCIT4WK2z1W+CUHZj4Skq/eaoxoC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_4001c9a47489c40bb2558796f6e4f5470fd6bff858b0e8f919a1f251938bd812
Files
-
JaffaCakes118_4001c9a47489c40bb2558796f6e4f5470fd6bff858b0e8f919a1f251938bd812.dll windows:5 windows x86 arch:x86
a6c7b0565586da90275c69f4b084ce85
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
advapi32
RegLoadAppKeyA
RegisterEventSourceW
user32
ShowOwnedPopups
gdi32
GetFontData
oleaut32
VarBstrFromDec
msvcrt
memset
kernel32
LoadLibraryExA
GetModuleHandleW
GetModuleFileNameA
Exports
Exports
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 124KB - Virtual size: 121KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ