ald.pdb
Static task
static1
Behavioral task
behavioral1
Sample
0b202276c685a87406b50a7dfe1048b4_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0b202276c685a87406b50a7dfe1048b4_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
0b202276c685a87406b50a7dfe1048b4_JaffaCakes118
-
Size
16KB
-
MD5
0b202276c685a87406b50a7dfe1048b4
-
SHA1
d1b6ab84902ff80a9d4a2700cc0e97b5235cc6d5
-
SHA256
61f9abd270ea91b878f10b9a3cd3015fd73f5da4101bc1fc14e30cff8d02b42b
-
SHA512
f380bca0a80b9288c9ea792caf602a6f90c23c3feae6bdc692ee58ccb491da62c43e8065c74f128717d298ddec9ec4914fee43f33d905309ba1e1e7f9567b42c
-
SSDEEP
384:hvIMSFU+2+AlqhXu5MXe94wUZw4Jxxxx5oyPvHOn:hQMSFUzc+LUOayYun
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b202276c685a87406b50a7dfe1048b4_JaffaCakes118
Files
-
0b202276c685a87406b50a7dfe1048b4_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Sections
.text Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 4KB - Virtual size: 1B
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 418B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ