Z:\repack_x64\build\release_x64\obj\src\mini\mini-patchdate-stub.pdb
Static task
static1
Behavioral task
behavioral1
Sample
68528a0ca7df217e1b6c2fce9e5c63e6_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
68528a0ca7df217e1b6c2fce9e5c63e6_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
68528a0ca7df217e1b6c2fce9e5c63e6_JaffaCakes118
-
Size
104KB
-
MD5
68528a0ca7df217e1b6c2fce9e5c63e6
-
SHA1
cbb417317c0fb0e0b08f1427508107d715310ea3
-
SHA256
ac13a2d1accef4c884460f7b797a3055959d2f600b4413c0d05012cc679bfc4c
-
SHA512
5b965510eeef7fd8218c488bed5ce6f601ff8b11c93fa5aa64356300aaef916c427007abbc0b061281e6aa089bd82ff0050d4f821c41adc8f5543eba511b4516
-
SSDEEP
1536:HiS5SXFrvXDj6DDFpQPuap6bJ5+uOMOsNE5mmm4OZff6:7OF7f6DQP8t5mxs25mmpOZX6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 68528a0ca7df217e1b6c2fce9e5c63e6_JaffaCakes118
Files
-
68528a0ca7df217e1b6c2fce9e5c63e6_JaffaCakes118.dll windows:4 windows x64 arch:x64
00c24768f977c190f622d1a42da72753
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
MoveFileA
GetLastError
Exports
Exports
tbawsad
Sections
.text Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xdata Size: 4KB - Virtual size: 552B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 936B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ