c:\IDE2\Dev\Next\DotNET\Compiler\Src\RTL\RTLFiles\obj\Debug\SoftVelocity.Clarion.FileIO.pdb
Static task
static1
Behavioral task
behavioral1
Sample
63d0993ae90b67f604fb27d5d0c2b443_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
63d0993ae90b67f604fb27d5d0c2b443_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
63d0993ae90b67f604fb27d5d0c2b443_JaffaCakes118
-
Size
156KB
-
MD5
63d0993ae90b67f604fb27d5d0c2b443
-
SHA1
e28c2761e4a5076a55a13cf75e2ebedce5c7218f
-
SHA256
941c1538266e220e377eb31319cb13a3f052b7f4a4ca801031d39baf0e290a89
-
SHA512
9422de9f15ab173ffc4d3b5b959d067d5fdd0664d7d50c8dc05dd0e3e2a03d1a637959933f75d036b8313c8c24a0ee27b563ef5b9f6f9e1e88633559776a3782
-
SSDEEP
3072:jvTDZdE5qvY585hfWhiUFPZ0ZCqZkW/WtokXo01ZWePsUI6SS/:tdE5qvpTWtVXrjEgS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 63d0993ae90b67f604fb27d5d0c2b443_JaffaCakes118
Files
-
63d0993ae90b67f604fb27d5d0c2b443_JaffaCakes118.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ