pdb.pdb
Static task
static1
Behavioral task
behavioral1
Sample
64cf080e0478f59d3fb4ee5fa6590656_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
64cf080e0478f59d3fb4ee5fa6590656_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
64cf080e0478f59d3fb4ee5fa6590656_JaffaCakes118
-
Size
60KB
-
MD5
64cf080e0478f59d3fb4ee5fa6590656
-
SHA1
ec348dc2cdfc56bd99283a55ab580a17a9132cd7
-
SHA256
d4ef05de6b2954f17dd5184649296816b8a37a20643f21f3dd7ea10e6916e815
-
SHA512
409d7aa7e7770be7259da34b79d9c20fa1affdff9e55fc2fbaaa5679e5ff4d69866d4cb82f7e2e0123bd23f2739cfd18fca7c0fabe5d605dcde3441aa031cef6
-
SSDEEP
768:bUe8LPbMQdRlzvWa62HMhc8Tnly9qhnlwle26iHe/MIgNteht3VnbLv:bD8LPbMcvWanHM9ly9wWcpPCtejJv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64cf080e0478f59d3fb4ee5fa6590656_JaffaCakes118
Files
-
64cf080e0478f59d3fb4ee5fa6590656_JaffaCakes118.dll windows:4 windows x86 arch:x86
7cf9614ad6b141fd5e4f3f0480568bbc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
HeapAlloc
GetProcessHeap
HeapFree
EnumCalendarInfoExA
GetCommProperties
Beep
Exports
Exports
beayvadp
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 888B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 382B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ