C:\bld_area\fsd_r1.5\bin\BIN.IRU\FSDPlugin.pdb
Static task
static1
Behavioral task
behavioral1
Sample
32535239dcf3db29acc2796d8d654dfe_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
32535239dcf3db29acc2796d8d654dfe_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
32535239dcf3db29acc2796d8d654dfe_JaffaCakes118
-
Size
346KB
-
MD5
32535239dcf3db29acc2796d8d654dfe
-
SHA1
0fdc3a111466a6fba407e12284f45bbee0e321ef
-
SHA256
02be90846fbbe930b7b252c75350e7883eb6d198dc5a445d07f093ec086c5838
-
SHA512
027c44c2ccc330311b5b7bbe8c5449d6874a9eac66116d0cbed9c9a3e41d4f34e523e4df695258196b569d1960fd5553b60468f0d6e15104d418ddc89a1fccb7
-
SSDEEP
6144:aj6Q4gIFACv65huqx04HnILepXSPcB5Y2WyOuN4f+G1f8c7:a0vACv6P04HseEcnY2WyOuN4GG1UA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 32535239dcf3db29acc2796d8d654dfe_JaffaCakes118
Files
-
32535239dcf3db29acc2796d8d654dfe_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Sections
.text Size: 290KB - Virtual size: 290KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 62KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 2B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ