c:\Documents and Settings\Administrator.MICROSOF-AEDF8D\Local Settings\Temp\j3p1fxh8.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2b00506494c9601bd06f48503490ffc4_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2b00506494c9601bd06f48503490ffc4_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
2b00506494c9601bd06f48503490ffc4_JaffaCakes118
-
Size
16KB
-
MD5
2b00506494c9601bd06f48503490ffc4
-
SHA1
0dc90f397ad9857a5e99c05bb4aa37584da4eeef
-
SHA256
3cec3736752c7302eb3623ef2928cf1cc8b0c9efe2bd57843c2b5208a9fe8446
-
SHA512
327e29338e466c6b701847c7201a4c233ba327b9b5bd2141e145204724cafbd8e115a24ba9d72f77c272917f8d1150595c0b50118fe2a2bafbf06df0e288e11e
-
SSDEEP
384:jOkOjYIOvpX1rHdrZ8mw7ORQocCaaWtCfsrJhKyRYbxHWa+YUqyB+6nQf9YNUo:jriCZv1HWa+YDyB+6nQf9YNUo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b00506494c9601bd06f48503490ffc4_JaffaCakes118
Files
-
2b00506494c9601bd06f48503490ffc4_JaffaCakes118.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 728B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ