Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_89b2a3f96b90720cb1df7a430845a3c4.dll
Resource
win7-20240729-en
General
-
Target
JaffaCakes118_89b2a3f96b90720cb1df7a430845a3c4
-
Size
534KB
-
MD5
89b2a3f96b90720cb1df7a430845a3c4
-
SHA1
c6a44201dfd1d954f2a3ec95061d2a38b3efeee6
-
SHA256
0023fccc4b4a3d75236ebd303555857ae88691f9aafe2ed5d1ea3d66d6382a31
-
SHA512
9d9a633ff4e5c0e553af7d708a4bbacd4b3d19c40515d6426d2fac997c7e3342909a7a979013957d988e249c044b825344234d910becea9d47563685332a4791
-
SSDEEP
3072:vxAqb35qSyYNYuFwXBBWYn0WWeP24iABEabz1fz+Bnp1WC3polyaSXO3etYkpHsk:yqb35qjY7wXrNJicLfz+hqv4BtYyxD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_89b2a3f96b90720cb1df7a430845a3c4
Files
-
JaffaCakes118_89b2a3f96b90720cb1df7a430845a3c4.dll windows:4 windows x86 arch:x86
247417006b79b77f72f53cd59ef4de66
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
VirtualAlloc
VirtualProtect
GetProcAddress
GetCurrentThread
GetCurrentProcess
lstrlenA
ole32
CoRegisterMessageFilter
advapi32
RegSetValueW
StartTraceA
gdiplus
GdipTransformPath
comctl32
CreateToolbarEx
ImageList_GetImageInfo
FlatSB_GetScrollProp
ImageList_SetIconSize
oleacc
CreateStdAccessibleProxyA
comdlg32
dwOKSubclass
user32
CallMsgFilter
FindWindowW
msimg32
DllInitialize
AlphaBlend
shell32
SHCreateShellFolderViewEx
version
VerInstallFileA
VerQueryValueW
winmm
wid32Message
oleaut32
VarDateFromDisp
oledlg
OleUIAddVerbMenuW
OleUIConvertW
shlwapi
PathMakeSystemFolderW
winspool.drv
SpoolerDevQueryPrintW
gdi32
GetStretchBltMode
Sections
.text Size: 189KB - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 69.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 296KB - Virtual size: 296KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ