Static task
static1
Behavioral task
behavioral1
Sample
529a5bd3d20b261adf861d16181308f6ba1c78954a06ac81c03a14ca91b927dd.dll
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_51911418cae59b97f116386b204bc6b547c68ca36f699030c51dbb5d14299c4c
-
Size
176KB
-
MD5
e3f99e3650198baca56c9b2bd0b8f619
-
SHA1
c3a33ee77e01e8ea1b7a80d8d32fceaee3c1180e
-
SHA256
51911418cae59b97f116386b204bc6b547c68ca36f699030c51dbb5d14299c4c
-
SHA512
daf1aa9d6c124c9de9168bf27c849e28bb159ec152e14f4642afb28d066dec3c44b613e39d1c5f68eb898608464a555bf149b3e7dbdd0c1fceff603e4c9fdfbc
-
SSDEEP
3072:bZFNbt1lsPDfCHrO+Am8porp+4DsXXM0z55yCHj+svuQUXlpmhPZge:bZTlsPD2fABporlE80znyCH6svaVgPz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/529a5bd3d20b261adf861d16181308f6ba1c78954a06ac81c03a14ca91b927dd
Files
-
JaffaCakes118_51911418cae59b97f116386b204bc6b547c68ca36f699030c51dbb5d14299c4c.zip
Password: infected
-
529a5bd3d20b261adf861d16181308f6ba1c78954a06ac81c03a14ca91b927dd.dll windows:5 windows x86 arch:x86
d67883ee85eede67419711a8fbd7ca0d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
winspool.drv
EnumFormsW
ws2_32
WSACleanup
ole32
PropVariantClear
user32
GetWindowTextA
kernel32
GetModuleHandleW
GetFileSize
GetModuleFileNameW
IsDebuggerPresent
OutputDebugStringA
CloseHandle
advapi32
QueryServiceStatusEx
RegCloseKey
AccessCheck
opengl32
glTexImage2D
Sections
.rdata Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 408KB - Virtual size: 406KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ