c:\Documents and Settings\user\Local Settings\Temp\dc52kubu.pdb
Static task
static1
Behavioral task
behavioral1
Sample
0cce06717c19c05cb53d0d99a601b180_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0cce06717c19c05cb53d0d99a601b180_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
0cce06717c19c05cb53d0d99a601b180_JaffaCakes118
-
Size
16KB
-
MD5
0cce06717c19c05cb53d0d99a601b180
-
SHA1
0c00ad18fe0f1167f70e438b3b767bb19ebc386c
-
SHA256
a1f2f77cd14a8d9a1beae57a75629550835608272ab357bbf3891ef8c17d8b28
-
SHA512
7eb8a2edae8ba8269fb60b2cfda5633aecc6785f03327664c9b9eb3bb388229d5aaf052147dd9ccee2e549d0234e2c6583739d6c05fb91c54546cca6b6c5fd46
-
SSDEEP
384:xOkOjYIOvpX1rHdrZ8mw7ORQocCaaWtCfsrJhKrkYbzHWa+YUqyB+6nQf9YCUN:xriCZBXHWa+YDyB+6nQf9YCUN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0cce06717c19c05cb53d0d99a601b180_JaffaCakes118
Files
-
0cce06717c19c05cb53d0d99a601b180_JaffaCakes118.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 728B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ