CcfZASHbgfDsbf
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_3d301d88a14d5770b529aca82e70f483eb37a1962af64bc0aedf2a25627261c3.dll
Resource
win7-20240708-en
General
-
Target
JaffaCakes118_3d301d88a14d5770b529aca82e70f483eb37a1962af64bc0aedf2a25627261c3
-
Size
184KB
-
MD5
a0d2f51f1169f42f31b166bb3471acd3
-
SHA1
2163df9d5c9f6755278223157548ca5539a54a3d
-
SHA256
3d301d88a14d5770b529aca82e70f483eb37a1962af64bc0aedf2a25627261c3
-
SHA512
39ecb3100c317425aff2d7ae5445f3927debf8a4358080910efd8eb943ac1e0f741a680aff8286d4ef82db6edc4f32bc99e51c3fc0ec331034a4bdf58736e6b6
-
SSDEEP
3072:XiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoulzoxss7:XiLVCIT4WK2z1W+CUHZj4Skq/eaosoC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_3d301d88a14d5770b529aca82e70f483eb37a1962af64bc0aedf2a25627261c3
Files
-
JaffaCakes118_3d301d88a14d5770b529aca82e70f483eb37a1962af64bc0aedf2a25627261c3.dll windows:5 windows x86 arch:x86
a6c7b0565586da90275c69f4b084ce85
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
advapi32
RegLoadAppKeyA
RegisterEventSourceW
user32
ShowOwnedPopups
gdi32
GetFontData
oleaut32
VarBstrFromDec
msvcrt
memset
kernel32
LoadLibraryExA
GetModuleHandleW
GetModuleFileNameA
Exports
Exports
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 124KB - Virtual size: 121KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ