ald.pdb
Static task
static1
Behavioral task
behavioral1
Sample
c8d795ba9fe7bc784ee50e865bd1959b_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c8d795ba9fe7bc784ee50e865bd1959b_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
c8d795ba9fe7bc784ee50e865bd1959b_JaffaCakes118
-
Size
68KB
-
MD5
c8d795ba9fe7bc784ee50e865bd1959b
-
SHA1
29be25228417d1e61d55631f5f03dd69f3bb18a7
-
SHA256
5f436e2e7d3b2b283e1a0e6ace6bcf173d75890adfcfc2296520cee14decd06e
-
SHA512
46f3997e6e85f99f05ac808bb3a07b4006f2eecea51bd62d1910d9b4343153dbce43321ec0f28e8b8b4930e750654a138e9ca9f7d45c009cba943ce0196cd1f2
-
SSDEEP
1536:p/Ac1PEm86NAKRJKId2E/IIdO/WCoo33gSk:Wc1PE1aAKRMw2EXeW+33gS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c8d795ba9fe7bc784ee50e865bd1959b_JaffaCakes118
Files
-
c8d795ba9fe7bc784ee50e865bd1959b_JaffaCakes118.dll windows:4 windows x86 arch:x86
a85a74231edd7ab68ec8b4a440845ec6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
Beep
HeapReAlloc
HeapDestroy
OpenEventW
FindResourceExW
FindResourceW
SetLastError
HeapAlloc
GetProcessHeap
HeapFree
PulseEvent
OpenSemaphoreA
Sections
.code_01 Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 406B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ