ald.pdb
Static task
static1
Behavioral task
behavioral1
Sample
cf7b60e846b9200a0fd7de8c63ad8c25_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
cf7b60e846b9200a0fd7de8c63ad8c25_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
cf7b60e846b9200a0fd7de8c63ad8c25_JaffaCakes118
-
Size
342KB
-
MD5
cf7b60e846b9200a0fd7de8c63ad8c25
-
SHA1
fa21658568e0b5e3ed103896f29b72563c8626ed
-
SHA256
d771af26f30242fd70c18012c9deadb39b1b3aa7bfd2b6f620774b54ba72d8b5
-
SHA512
10e56d13a32e4f2e9fcac74388b0356448502f37e95248bebb15494bf74726f699dedae4c7b9e14e643ee70a79b36712445489117ad3861ac59cda6aea19ed0f
-
SSDEEP
6144:yIFKnKH/YtJCm3qLXiMuNeE2NVBG4HdB4HlLf77pOiUSWu3z/B:9FKnKf0ru2NelBGEQFbRW+5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cf7b60e846b9200a0fd7de8c63ad8c25_JaffaCakes118
Files
-
cf7b60e846b9200a0fd7de8c63ad8c25_JaffaCakes118.dll windows:4 windows x86 arch:x86
08d488321e478dce991523cd3b62476e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
HeapAlloc
GetProcessHeap
HeapFree
CloseHandle
CreatePipe
Beep
Sections
.text Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 307KB - Virtual size: 307KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ