Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_8bbac1f6e64537bd91f903994912dc96.dll
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_8bbac1f6e64537bd91f903994912dc96
-
Size
180KB
-
MD5
8bbac1f6e64537bd91f903994912dc96
-
SHA1
9099279d268d3b3ded00bcc5294b8df79b7a6abe
-
SHA256
12627600a70bff6a42e8319f71a2221338ff54332afbf6ae28f130f2cfde630b
-
SHA512
4684a015de4a1bc2852000624adbd3243db72d3d544636c1713a475a71bc407707a8a6509fa956b5dc5bd071ca7e09ee33f4cde48baf62ff5d0ecb2725fb4b8f
-
SSDEEP
3072:zy9p0m9FOGDv64TOvqdjR91E404PUW6bKHJZK0Bzb5rea:zy9p0bG6q7040aBfK0db5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_8bbac1f6e64537bd91f903994912dc96
Files
-
JaffaCakes118_8bbac1f6e64537bd91f903994912dc96.dll windows:5 windows x86 arch:x86
badb3d94d7a44189a7eeb5528a733e61
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
shell32
SHGetDesktopFolder
user32
ShowOwnedPopups
setupapi
SetupDiEnumDeviceInfo
iphlpapi
GetIfTable
advapi32
RegOverridePredefKey
kernel32
GetModuleFileNameW
LoadLibraryExA
oleaut32
VarR4FromI2
msvcrt
memset
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ