CcfZASHbgfDsbf
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_0b2e2218f8395d8307d9a4344209087ff092a03c88efe7b8ecb1be4408b8dfd1.dll
Resource
win7-20241010-en
General
-
Target
JaffaCakes118_0b2e2218f8395d8307d9a4344209087ff092a03c88efe7b8ecb1be4408b8dfd1
-
Size
184KB
-
MD5
5aeebce1d018f369dd5e1d8c2da4b64f
-
SHA1
a851c204ab82c49d4e5a94c8dcbf114482048233
-
SHA256
0b2e2218f8395d8307d9a4344209087ff092a03c88efe7b8ecb1be4408b8dfd1
-
SHA512
712f2ee7afb232fbc17f3ec7ba2eabf683e089463d0760ae85caa43e6e3b8515d70700e62bd45a06ba38abb0e6e796ef02035630259389b86cec10ff3407adf6
-
SSDEEP
3072:XiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoQlzoxss7:XiLVCIT4WK2z1W+CUHZj4Skq/eaouoC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_0b2e2218f8395d8307d9a4344209087ff092a03c88efe7b8ecb1be4408b8dfd1
Files
-
JaffaCakes118_0b2e2218f8395d8307d9a4344209087ff092a03c88efe7b8ecb1be4408b8dfd1.dll windows:5 windows x86 arch:x86
a6c7b0565586da90275c69f4b084ce85
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
advapi32
RegLoadAppKeyA
RegisterEventSourceW
user32
ShowOwnedPopups
gdi32
GetFontData
oleaut32
VarBstrFromDec
msvcrt
memset
kernel32
LoadLibraryExA
GetModuleHandleW
GetModuleFileNameA
Exports
Exports
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 124KB - Virtual size: 121KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ