c:\Documents and Settings\10320003\Local Settings\Temp\y04uc6-f.pdb
Static task
static1
Behavioral task
behavioral1
Sample
e256dcbf921d751a244fc1efd7443105_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e256dcbf921d751a244fc1efd7443105_JaffaCakes118.dll
Resource
win10v2004-20240910-en
General
-
Target
e256dcbf921d751a244fc1efd7443105_JaffaCakes118
-
Size
16KB
-
MD5
e256dcbf921d751a244fc1efd7443105
-
SHA1
4b76af1a583d315fdc1a70ab57a8b754ef88c352
-
SHA256
aeedd683be601e3cd487638d6b32f2b8e9fd81d54e85f09fdd65b08aafee5ca3
-
SHA512
1a2baee137a5868b651f9701be8b1b1c5c3b9c13d591b428f5623aa3294cdbfda2bdc6efb2e16c5999c145db8f8d126804dd666e27c866654ca64a6ac04d9d25
-
SSDEEP
384:KGWcjgpj7SE89t4pcsYEOAMLFFk4eLFQ:Fjoj7S8FYE+ZFk4eRQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e256dcbf921d751a244fc1efd7443105_JaffaCakes118
Files
-
e256dcbf921d751a244fc1efd7443105_JaffaCakes118.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 680B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ