ald.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2f3a501ef08737348667a507f472a483_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2f3a501ef08737348667a507f472a483_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
2f3a501ef08737348667a507f472a483_JaffaCakes118
-
Size
9KB
-
MD5
2f3a501ef08737348667a507f472a483
-
SHA1
b4121e6bff65e975daa1b75510f5bbc711d9e437
-
SHA256
615cf9f4a8a194783c19cfd112b6331167f01dd4600928819181d41c95af9274
-
SHA512
119726d7afcad2256e4f89f92e81e8ef9acee409fe5321adbf3ac04615e7329f177929267c576397df24712ca0d7835fce4b7e7cf7cf28ac7149ca606044d87f
-
SSDEEP
192:d0R6NVOx+7ERitEEVU/22OrfLxpLdnt7yjkY:d0kQRcHVU/29hpttuoY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f3a501ef08737348667a507f472a483_JaffaCakes118
Files
-
2f3a501ef08737348667a507f472a483_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrh Size: 71KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 430B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ