pdb.pdb
Static task
static1
Behavioral task
behavioral1
Sample
dcc6e4a9a5b74700967c16a749966343_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dcc6e4a9a5b74700967c16a749966343_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
dcc6e4a9a5b74700967c16a749966343_JaffaCakes118
-
Size
6KB
-
MD5
dcc6e4a9a5b74700967c16a749966343
-
SHA1
9a3bc4defe18bde0663a0c1def35971217bb3728
-
SHA256
5a6a8213cc1454bb1457a3ac6bb800ae093987812cf8f4eddf092c86beeb2d5a
-
SHA512
ca798e34eb11fdc1e552f17a201778076d4ea2e52fe3bd126136da691481b2c0d60485b8646a5cec9884b41a7bb0e4d1e9bbea3664197be7285b1efe772edb07
-
SSDEEP
48:aoikoHeikoQtN0ZR+VbSo2r8+hc7jAeLigK8q3pdmmXoO+uSS:9oLkFtC9o6yjAT3PXo2SS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dcc6e4a9a5b74700967c16a749966343_JaffaCakes118
Files
-
dcc6e4a9a5b74700967c16a749966343_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 888B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 372B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ