c:\NtlxDeployment\NtlxObjects\tempResBuild\Release\Localize.pdb
Static task
static1
Behavioral task
behavioral1
Sample
aa6cb10d644ffcb34e8e17e40d099fc1_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
aa6cb10d644ffcb34e8e17e40d099fc1_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
aa6cb10d644ffcb34e8e17e40d099fc1_JaffaCakes118
-
Size
1.0MB
-
MD5
aa6cb10d644ffcb34e8e17e40d099fc1
-
SHA1
39b4a329dc0b81f1c5f2d4383e63a3b3b91a7fae
-
SHA256
c00cba61539d75faa8e41ca380ab4d0c5659e0776afd927c3c6a837aa6c7d4db
-
SHA512
c84eef24248666cea89103e7d89b7b509ec3b21f20baca4869497027e4b248964b071096243dd487361cca974447714e9f3f682b4b15e1ea84db8f406cf45916
-
SSDEEP
12288:/LzQ+Verc5KrIWMhSfdHX8xP78/6xHlTdDOKWIdrHaiH4O4M9DSnl4JK44RR9DA:lcc5AVfd4T8ixHlTdDVWwdxulhbf9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa6cb10d644ffcb34e8e17e40d099fc1_JaffaCakes118
Files
-
aa6cb10d644ffcb34e8e17e40d099fc1_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Sections
.rdata Size: 4KB - Virtual size: 116B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ