System.IdentityModel.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ba6d129bded79ca2879ce5e7a7ce1b5b_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ba6d129bded79ca2879ce5e7a7ce1b5b_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
ba6d129bded79ca2879ce5e7a7ce1b5b_JaffaCakes118
-
Size
425KB
-
MD5
ba6d129bded79ca2879ce5e7a7ce1b5b
-
SHA1
4e965ad04c27478ef420a92dd3918713d5507d38
-
SHA256
cbb705e7c6209568c274d360dc113fa0b3bafd7ba95f06822fa61221defc9e42
-
SHA512
aad9da3443fff3e3b1d5924b3f87f924be2d09b4b9bc4af922303f68939809c3612402134984a5850d3276b40f5d0e36daf6c997ddc552b604a402603bed9cdf
-
SSDEEP
6144:gR+600E7r/zDLOiZw4VzbJ+Z9Nd890wu40dwaL1t2mXblQZBDesCUnm:QnE7r/zmZZe+iBDq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba6d129bded79ca2879ce5e7a7ce1b5b_JaffaCakes118
Files
-
ba6d129bded79ca2879ce5e7a7ce1b5b_JaffaCakes118.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 368KB - Virtual size: 364KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ