c:\Documents and Settings\10320003\Local Settings\Temp\e1svzqtk.pdb
Static task
static1
Behavioral task
behavioral1
Sample
30da04f6351c4eafe1311cb9f6b15735_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
30da04f6351c4eafe1311cb9f6b15735_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
30da04f6351c4eafe1311cb9f6b15735_JaffaCakes118
-
Size
28KB
-
MD5
30da04f6351c4eafe1311cb9f6b15735
-
SHA1
62de6ba26faf3eba007edf910d17732593c76703
-
SHA256
f9effb597a4a26fcf72496f02372fa719cbc31ae2081253560f5437425fa8ae1
-
SHA512
ec1982a2fc9ec1905e0b80e761eb1ef7622335d35f5614199a0254796bbf70960b97bfb4e92a4eccc8fc7cd0d6a530d971818b46f897473701a002140d12a741
-
SSDEEP
384:x7CSSdmqsNm0PdCq5AK0TOHy/m8s8yiRV8:8YGhU1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30da04f6351c4eafe1311cb9f6b15735_JaffaCakes118
Files
-
30da04f6351c4eafe1311cb9f6b15735_JaffaCakes118.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 680B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ