binrepair.pdb
Static task
static1
Behavioral task
behavioral1
Sample
264313c0e5e6060ddffc07df8a07ea70_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
264313c0e5e6060ddffc07df8a07ea70_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
264313c0e5e6060ddffc07df8a07ea70_JaffaCakes118
-
Size
147KB
-
MD5
264313c0e5e6060ddffc07df8a07ea70
-
SHA1
91b7a6ba877cf4631164b65227b5ccc865fe34dd
-
SHA256
965776dc658c84410096ff846182c9bf402b04a437cf31db432cc5579be2fda7
-
SHA512
0cca84fa69fd2bf01f37d297e7b742c27ef3ca55fddc6c6e272c52ddeb7ead0337dea93b07a02705862d25d5915430984c0be3ec8c45400f547647d87ec542a6
-
SSDEEP
3072:8mtVm+0Z8gm+gIViTZQBzZGGXxWZcgKNYw1sC1mmVXGI:lVm+0qgHkSvxEcigVl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 264313c0e5e6060ddffc07df8a07ea70_JaffaCakes118
Files
-
264313c0e5e6060ddffc07df8a07ea70_JaffaCakes118.dll windows:4 windows x86 arch:x86
5b7e5ae5d509d53d02398bcf8fe89dea
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
InterlockedCompareExchange
GetTickCount
LocalReAlloc
CreateConsoleScreenBuffer
GlobalUnfix
SetThreadPriority
LocalShrink
WaitForMultipleObjectsEx
TlsGetValue
GetHandleInformation
GetBinaryTypeA
GetTapeParameters
ResumeThread
SwitchToFiber
GetFileTime
GetCurrentProcess
SetConsoleWindowInfo
UnmapViewOfFile
TlsSetValue
RemoveDirectoryA
VirtualAlloc
QueueUserWorkItem
Exports
Exports
JinBeginAction
JinEndAction
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
edata Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
idata Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 404B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ