c:\Documents and Settings\10320003\Local Settings\Temp\jgk94zqk.pdb
Static task
static1
Behavioral task
behavioral1
Sample
16de38e6a7f22b9a639e1be4bac2afa9_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
16de38e6a7f22b9a639e1be4bac2afa9_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
16de38e6a7f22b9a639e1be4bac2afa9_JaffaCakes118
-
Size
15KB
-
MD5
16de38e6a7f22b9a639e1be4bac2afa9
-
SHA1
6e8d291ca23949e6928438c462c8654e648ee6c0
-
SHA256
f46c1f0f439588b94fd9d88b09ded7d8ba7aaac6d3f755bf3a011f435e03f809
-
SHA512
271d35b46340d62ea671b632222e5b1acbb4a3e9947cac067e6443c04816579e3842049380d2982acdee00ad8b7480fde5f3bc72d7e7a988c1bc366d090476dd
-
SSDEEP
192:0EXLK+5krhegu4hTi8ih8dOs7+wDTu7s9rz1Gz7AmA6vNy+IqOtp5lWB58B:fK+5kIgTMN8d77Wsa3SVlK5u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16de38e6a7f22b9a639e1be4bac2afa9_JaffaCakes118
Files
-
16de38e6a7f22b9a639e1be4bac2afa9_JaffaCakes118.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 680B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ