DllRegisterServer
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_6e7499d341ef29716db7d37f0325fe255b280cda0e6812931e631e48ed8f71d3.dll
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_6e7499d341ef29716db7d37f0325fe255b280cda0e6812931e631e48ed8f71d3
-
Size
402KB
-
MD5
3bdb0945ffa89ffe766783ed63c26aec
-
SHA1
98c851417e1910763636485d8109a2d167969f2d
-
SHA256
6e7499d341ef29716db7d37f0325fe255b280cda0e6812931e631e48ed8f71d3
-
SHA512
d07a4824cfd88feae7d885b4bb9ee827e6159de924209d1ecedf3a1e61c5ff6d049280b6229ef38ede20be30bfb946ec776221540675f3247b575a02128f17a2
-
SSDEEP
6144:I9wEpo6/4WaPgMIuxqqjAu/CwrQ8nRw212Uu9VrHnnCzK9N+COF80W89K6rT:lGo6/4W6QQqqjAQQnOuzTneKKCEWw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_6e7499d341ef29716db7d37f0325fe255b280cda0e6812931e631e48ed8f71d3
Files
-
JaffaCakes118_6e7499d341ef29716db7d37f0325fe255b280cda0e6812931e631e48ed8f71d3.dll regsvr32 windows:6 windows x64 arch:x64
384ceb9f996fee01f9246edaa0cc74fe
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
imm32
ImmGetProperty
ImmSetOpenStatus
ImmSetCandidateWindow
ImmGetCandidateWindow
ImmIsIME
ImmSetCompositionFontA
ImmGetContext
ImmReleaseContext
ImmGetCandidateListA
ImmGetOpenStatus
ImmSetCompositionWindow
ImmGetCompositionStringA
kernel32
ExitProcess
WriteConsoleW
CreateFileW
CloseHandle
SetFilePointerEx
GetFileSizeEx
GetConsoleMode
GetConsoleOutputCP
WriteFile
GlobalReAlloc
SetStdHandle
HeapReAlloc
HeapSize
GetStringTypeW
GetFileType
GetStdHandle
GetProcessHeap
LCMapStringW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
LocalUnlock
LocalFree
IsDBCSLeadByte
GlobalFree
GlobalAlloc
LocalAlloc
LocalLock
GlobalUnlock
GlobalLock
lstrlenA
VirtualAlloc
FlushFileBuffers
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
InterlockedFlushSList
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
EncodePointer
RaiseException
RtlPcToFileHeader
GetModuleHandleExW
GetModuleFileNameW
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
user32
EndPaint
BeginPaint
ReleaseDC
GetMessageA
DispatchMessageA
LoadCursorA
LoadStringA
PostMessageA
GetSystemMetrics
CreateCaret
GetKeyboardLayout
RegisterClassA
TranslateMessage
SendMessageA
DestroyCaret
LoadIconA
PeekMessageA
PostQuitMessage
GetWindowRect
DestroyWindow
GetCaretPos
SetWindowPos
HideCaret
SetCaretPos
ShowWindow
ClientToScreen
SetWindowTextA
MoveWindow
CreateWindowExA
GetWindowLongPtrA
ShowCaret
InvalidateRect
GetDC
DefWindowProcA
GetClientRect
gdi32
SetBkColor
GetTextColor
SetBkMode
TextOutA
SetTextColor
ExtTextOutA
GetObjectA
GetTextMetricsA
GetTextExtentPointA
GetStockObject
SelectObject
ole32
CoTaskMemFree
CoLoadLibrary
CoTaskMemAlloc
Exports
Exports
Sections
.text Size: 90KB - Virtual size: 89KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 47KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 253KB - Virtual size: 253KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ