c:\Documents and Settings\SESA35177\Local Settings\Temp\dixwox_6.pdb
Static task
static1
Behavioral task
behavioral1
Sample
38db78b9a0fbf1156b068f065ea32477_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
38db78b9a0fbf1156b068f065ea32477_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
38db78b9a0fbf1156b068f065ea32477_JaffaCakes118
-
Size
92KB
-
MD5
38db78b9a0fbf1156b068f065ea32477
-
SHA1
3046a58ea976a86f177c9f1556f5d2559628ff91
-
SHA256
ce42925ebc8a7f49ae5a378bd8bc69472d6e7fa9d7cc832f52eea553545339f7
-
SHA512
8aad620371f80ec6545bb53f1ad2f058ed5914f0b15959bd7ecd02ee71012ab369f00fd4052ee3493f1d542b94795b386d4048e4924b4a83b194ec4a090c9ebb
-
SSDEEP
1536:I5N9hKu8JO0fddRl0pVEco1+FjGP5pjXB1XC3/0ZdWWBWNg4:Ij9UJOedQHFjGRpjXB1XC3/0ZdWWBWNx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38db78b9a0fbf1156b068f065ea32477_JaffaCakes118
Files
-
38db78b9a0fbf1156b068f065ea32477_JaffaCakes118.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 80KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 680B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ