Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_d59cc0560314e993092ee0d521dc5d8499282555fd1884eec0f3f561ac4c8e1e.dll
Resource
win7-20241010-en
General
-
Target
JaffaCakes118_d59cc0560314e993092ee0d521dc5d8499282555fd1884eec0f3f561ac4c8e1e
-
Size
154KB
-
MD5
371f86018016bf403170051376f9c088
-
SHA1
4a17adf258b663ee689fdf0c1bb9152bd6e5e986
-
SHA256
d59cc0560314e993092ee0d521dc5d8499282555fd1884eec0f3f561ac4c8e1e
-
SHA512
7de29ae9ea4e9c29e160949e228873b955854b7d002c0d230455f2bfe9033d7f221dc578d1fa9c599ea2e83b2af6a48e21387935be7b89e1903173e3bc9ecf51
-
SSDEEP
3072:gZ+9Q25AHEf/2gUU7uZAOCIB0IgESXZyX/sS5eqLrNWBC:jQeVf/2gUU76rDeIgESXZmYYa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_d59cc0560314e993092ee0d521dc5d8499282555fd1884eec0f3f561ac4c8e1e
Files
-
JaffaCakes118_d59cc0560314e993092ee0d521dc5d8499282555fd1884eec0f3f561ac4c8e1e.dll windows:5 windows x86 arch:x86
d6a8e0436f1920a9caa4b8885c9c24ad
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
TranslateMessage
opengl32
glTexSubImage1D
advapi32
RegLoadAppKeyW
ole32
CreateStreamOnHGlobal
kernel32
OpenSemaphoreW
GetModuleHandleW
OutputDebugStringA
LoadLibraryExA
GetProfileSectionA
CloseHandle
Sections
.text Size: 136KB - Virtual size: 138KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 5KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 832B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ