C:\BUILD-FOLDERS\Framework-Core\Libraries\HBinCryptRw\obj\Release\HBinCryptRw.pdb
Static task
static1
Behavioral task
behavioral1
Sample
c83807776ef1395ae4db2b7ffb6a1147_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c83807776ef1395ae4db2b7ffb6a1147_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
c83807776ef1395ae4db2b7ffb6a1147_JaffaCakes118
-
Size
60KB
-
MD5
c83807776ef1395ae4db2b7ffb6a1147
-
SHA1
c9038b917450b95d592664fd89c04e1e4573656a
-
SHA256
4a1e7e58216c8d53412fa7aeb78907ba57659fac9dad7f5385b392f34a170c37
-
SHA512
1a2efd97d47590b5f8b771b00b49ab96eb3f33d48a8359a44eb77e99e99c3fe85e71cb3ef702b332e85553dc27497adff41b40877cb357380df5a09a03d54b56
-
SSDEEP
768:X6UfybGO6w1KoEdiyPDd0GQkdlO8kUikvPhxQGT0HTyOWe1Iv51UuEhiqUsM5KY4:ZrO6wnEdl7PQhxzpBWC67FxbL60SZvH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c83807776ef1395ae4db2b7ffb6a1147_JaffaCakes118
Files
-
c83807776ef1395ae4db2b7ffb6a1147_JaffaCakes118.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ