fdsksd.pdb
Static task
static1
Behavioral task
behavioral1
Sample
4a8a021266f5052235048df6ec420a43_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4a8a021266f5052235048df6ec420a43_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
4a8a021266f5052235048df6ec420a43_JaffaCakes118
-
Size
116KB
-
MD5
4a8a021266f5052235048df6ec420a43
-
SHA1
cfa0fc3f2a0d9e262e928c3af1df92b5e7012703
-
SHA256
85089e489352644412c41b633de5670e395df84716dc0600f2582452abadb046
-
SHA512
a62673818e49ae7d766fecc1f7148f5fc13aabf6c8dee38cc83f024f58561efd8266721faf7a83503afe931da0d14005e8e85496c627191dabf8c37829cadcb7
-
SSDEEP
3072:166PkviVsAr8nr08W7x3QN8icL3Cx3i00B:QeQiqAYJW7J333i3i5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a8a021266f5052235048df6ec420a43_JaffaCakes118
Files
-
4a8a021266f5052235048df6ec420a43_JaffaCakes118.dll windows:4 windows x86 arch:x86
d71ff74ccfe699004afc74c243196b27
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
advapi32
AllocateAndInitializeSid
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetFileSecurityA
version
GetFileVersionInfoA
Sections
.text Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 566B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 468B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ