D:\devcs\Holiday\Holiday\obj\Debug\Holiday.pdb
Static task
static1
Behavioral task
behavioral1
Sample
b156fecc2a8a4b085c65e603cffb66d4_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b156fecc2a8a4b085c65e603cffb66d4_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
b156fecc2a8a4b085c65e603cffb66d4_JaffaCakes118
-
Size
235KB
-
MD5
b156fecc2a8a4b085c65e603cffb66d4
-
SHA1
f80e80883df3d7dcec3681b1dea9ad76a2ecc3d6
-
SHA256
275cb59f3b914a02d4f1faf98f28a8631538061eceae808015b9ec2568b58777
-
SHA512
9ac76a1157dec471deab2e002c11eeef6fe2ac44755bbbe5f037518c7082ab924512bdf6170d8dfcba77a2e940bf39a76a55ea8305c3cb9611415af1b4df2c1f
-
SSDEEP
3072:9QSWpQTdU0OyrYB6ik7nOPMEpWa5ZzUEOrJjaI3DM6T23OyErogTMzVEV+wjWFe4:xdU0sI97aJfzvONjaM5TG1M/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b156fecc2a8a4b085c65e603cffb66d4_JaffaCakes118
Files
-
b156fecc2a8a4b085c65e603cffb66d4_JaffaCakes118.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 233KB - Virtual size: 233KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 760B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ