od.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ea33379d85787ac566710126fb5cfbca_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
ea33379d85787ac566710126fb5cfbca_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
ea33379d85787ac566710126fb5cfbca_JaffaCakes118
-
Size
54KB
-
MD5
ea33379d85787ac566710126fb5cfbca
-
SHA1
a3a7ebdb9395d7436f0bef8297bd1a7f6b49eed9
-
SHA256
e3d9843777acf3cab3e15141f19f76e4f1a5068faa179d230d93158f7534207d
-
SHA512
66ee7a900a1183c144b84b95522449324785184737c93394766209fa297cc1a602119bbc86b2a1e86c7ccf105e240027c98d70656d892b0c330fe5af2fa0e096
-
SSDEEP
768:GEp/yfPqpVnGyTRsrwVhO602jwScjbuY3YcWtn+ZB48sBGVnaFQc097pAtjKoQfj:GEgAnGiRgwXFjA/R3YcWt+iwWQJQjos
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea33379d85787ac566710126fb5cfbca_JaffaCakes118
Files
-
ea33379d85787ac566710126fb5cfbca_JaffaCakes118.dll windows:4 windows x86 arch:x86
95f44b6a1f284e846c47d1648f742161
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
HeapReAlloc
HeapDestroy
OpenEventW
FindResourceExW
FindResourceW
Beep
HeapAlloc
GetProcessHeap
HeapFree
SetFilePointerEx
SetLastError
ExitProcess
rpcrt4
RpcEpUnregister
RpcEpRegisterW
RpcStringBindingParseW
RpcBindingToStringBindingW
RpcBindingVectorFree
crypt32
CryptProtectData
Exports
Exports
uzjb
Sections
.text Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 986B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1016B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 396B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ