CcfZASHbgfDsbf
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_881cd28ebad50f3e0bd882896968df779ba77d71ed85380915809e9ace9954a6.dll
Resource
win7-20240708-en
General
-
Target
JaffaCakes118_881cd28ebad50f3e0bd882896968df779ba77d71ed85380915809e9ace9954a6
-
Size
184KB
-
MD5
c54070949888ccd7b8c6cf91832fe255
-
SHA1
f2218593e9fda30987616a93db0b5e0409aab731
-
SHA256
881cd28ebad50f3e0bd882896968df779ba77d71ed85380915809e9ace9954a6
-
SHA512
2ea491c713da3f7f85efb9293cba0f342891892b4155677f94360692560123c57b27a30e0f34307436b23d5381cf9ad8e3d3301e701941a8e281a0520a79ca97
-
SSDEEP
3072:ziLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoVlzoxss7:ziLVCIT4WK2z1W+CUHZj4Skq/eao7oC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_881cd28ebad50f3e0bd882896968df779ba77d71ed85380915809e9ace9954a6
Files
-
JaffaCakes118_881cd28ebad50f3e0bd882896968df779ba77d71ed85380915809e9ace9954a6.dll windows:5 windows x86 arch:x86
a6c7b0565586da90275c69f4b084ce85
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
advapi32
RegLoadAppKeyA
RegisterEventSourceW
user32
ShowOwnedPopups
gdi32
GetFontData
oleaut32
VarBstrFromDec
msvcrt
memset
kernel32
LoadLibraryExA
GetModuleHandleW
GetModuleFileNameA
Exports
Exports
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 124KB - Virtual size: 122KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ