f:\masterbuild\Aris\Release\7.0\2.153132(de-en-es-fr-ja)\aris40\Release\AERHCO_de.pdb
Static task
static1
Behavioral task
behavioral1
Sample
4d58bbc511a8825878e520352fa3f005_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4d58bbc511a8825878e520352fa3f005_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
4d58bbc511a8825878e520352fa3f005_JaffaCakes118
-
Size
132KB
-
MD5
4d58bbc511a8825878e520352fa3f005
-
SHA1
f217d0f3182ed34931e1a3166a394876420cd811
-
SHA256
445be587434f81e6f272799f141ba20a9bfc0271d94adcd41a99994b01276acd
-
SHA512
0462ab63706dd420cceb57ce008cbc7190f24af0262c5481f04ad10f08448bd46c84a35aa0e51555030be21d71333b94eb6464e2e84ba3e715fcdf302063b0a3
-
SSDEEP
1536:ESErzejmHY0gwN2GrJF+WGFJnzjnP+/HUe/eIV:ESErzejmHY0gwNPrJF+/FJnzjncVeIV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4d58bbc511a8825878e520352fa3f005_JaffaCakes118
Files
-
4d58bbc511a8825878e520352fa3f005_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Sections
.rdata Size: 4KB - Virtual size: 138B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 120KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ