c:\depot\workscd\Themes\Lang\Release\WkThmLng.pdb
Static task
static1
Behavioral task
behavioral1
Sample
1868ac488d86cfc0b0e90741ed440d73_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1868ac488d86cfc0b0e90741ed440d73_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
1868ac488d86cfc0b0e90741ed440d73_JaffaCakes118
-
Size
72KB
-
MD5
1868ac488d86cfc0b0e90741ed440d73
-
SHA1
09dd5be799e87560cf981402bcea8f842da9ae0c
-
SHA256
188682286698c179c5b001ed155539879c98fd9184b90506cb068a137439d16d
-
SHA512
3383e7217422c731852a1541fd760019790497dfcca594e0e84e3bc1650eb62022f21960bbc128a3901263e491296843f2c998d341a46fbefe02286dab050eef
-
SSDEEP
192:gqAbLfzWTX7LWkCmN8EAsV9AVQU15ih33j3DkNBs/JVijjCGqQXdx:gqAbLKLWk1V9AxyzijjgQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1868ac488d86cfc0b0e90741ed440d73_JaffaCakes118
Files
-
1868ac488d86cfc0b0e90741ed440d73_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Sections
.rdata Size: 4KB - Virtual size: 102B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 60KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ