remote-yilder.pdb
Static task
static1
Behavioral task
behavioral1
Sample
03df5f9813d3c7d25e907b9013398226_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
03df5f9813d3c7d25e907b9013398226_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
03df5f9813d3c7d25e907b9013398226_JaffaCakes118
-
Size
147KB
-
MD5
03df5f9813d3c7d25e907b9013398226
-
SHA1
7c4a46e0dcd2b3ab490bf332a2310790abab58ee
-
SHA256
07ba94c335f0c08143c1799eea9ea14371cdeed91181e8a733a704c22d3bd45b
-
SHA512
4803a3fa54a9e92f6180bed07f507241b10a15376145dcf8c00238c34e6a25e9ae82da7ee287e4cce903a856a1bafd0e20d67bf941980fb6062d906f444356a0
-
SSDEEP
3072:w0KoPm3fslD98wpKV7Iv5X3DqqBZ9zVWsqA4EKzWKRefU4LrTmL:Z+PslD98w8tIOUgWBUOi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03df5f9813d3c7d25e907b9013398226_JaffaCakes118
Files
-
03df5f9813d3c7d25e907b9013398226_JaffaCakes118.dll windows:4 windows x86 arch:x86
5b7e5ae5d509d53d02398bcf8fe89dea
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
InterlockedCompareExchange
GetTickCount
LocalReAlloc
CreateConsoleScreenBuffer
GlobalUnfix
SetThreadPriority
LocalShrink
WaitForMultipleObjectsEx
TlsGetValue
GetHandleInformation
GetBinaryTypeA
GetTapeParameters
ResumeThread
SwitchToFiber
GetFileTime
GetCurrentProcess
SetConsoleWindowInfo
UnmapViewOfFile
TlsSetValue
RemoveDirectoryA
VirtualAlloc
QueueUserWorkItem
Exports
Exports
JinBeginAction
JinEndAction
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
edata Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
idata Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 408B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ