c:\src\googleclient\total_recall\gdsapi\release\dll\obj\dll.pdb
Static task
static1
Behavioral task
behavioral1
Sample
0c27d4862c3dd024f3b0cb5a9e8feff6_JaffaCakes118.dll
Resource
win7-20240508-en
General
-
Target
0c27d4862c3dd024f3b0cb5a9e8feff6_JaffaCakes118
-
Size
118KB
-
MD5
0c27d4862c3dd024f3b0cb5a9e8feff6
-
SHA1
833db0411912fed8de84b741df16322bf1896d55
-
SHA256
9674bd04b2cd649563b5b02441c232ca136db43931737ee4ee9c0004fe4d3573
-
SHA512
a7c4690af2a6a9d3b2a8555148aecd45b8915db1c8a39e34531b071df072f027b8df61d0a05f6e1e6b215689beefebfbc44af500c8f6327d932f4e2f33d13651
-
SSDEEP
1536:aMOPHgrawhadqiR9i3a06JquoGtTyqGszgmntuLfZZZj4Tk2lpGByKagEUUltg:aMOPHAeq+i3x2PHTyPmTTkTBCltg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c27d4862c3dd024f3b0cb5a9e8feff6_JaffaCakes118
Files
-
0c27d4862c3dd024f3b0cb5a9e8feff6_JaffaCakes118.dll windows:4 windows x86 arch:x86
fddabd1b87666f80ac79b2e77bddb92f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
GetVersionExA
FreeLibrary
GetProcAddress
LoadLibraryA
GetProcessHeap
HeapAlloc
advapi32
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
Exports
Exports
GDSCompatibilityCheck
Sections
.text Size: 1024B - Virtual size: 864B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 668B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 536B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 208B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 114KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE