MyGym.Notifications.pdb
Static task
static1
Behavioral task
behavioral1
Sample
b81aee26e6b31aa06c7dd64348af6cce_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
b81aee26e6b31aa06c7dd64348af6cce_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
b81aee26e6b31aa06c7dd64348af6cce_JaffaCakes118
-
Size
23KB
-
MD5
b81aee26e6b31aa06c7dd64348af6cce
-
SHA1
a9ffffdf47fcefbd11dddc0ea39f9043120100ba
-
SHA256
3c35ce71dfddf6b9cfe52b73cd6c9c345b94879aa578c7bcf55db9f527343480
-
SHA512
4f10514869f567de79be997069ee7fc16ebd8b21dc71fa62d8e2c07871c4f2e18fe780f2902e3e1d633b45077f16389acb3e5ec1267ecbe2ef5dd389ec63baa8
-
SSDEEP
384:2EhQbPyZUAeHGhu3Fyi4wi7QgfJ2WWfKXq7ypkZw3YVZZfqY3Rhu:bNe7Fyi4wicYW77KIw3YpfjK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b81aee26e6b31aa06c7dd64348af6cce_JaffaCakes118
Files
-
b81aee26e6b31aa06c7dd64348af6cce_JaffaCakes118.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ