ald.pdb
Static task
static1
Behavioral task
behavioral1
Sample
37aacbe510f22d77f4f2311a2c42afb0_JaffaCakes118.dll
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
37aacbe510f22d77f4f2311a2c42afb0_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
37aacbe510f22d77f4f2311a2c42afb0_JaffaCakes118
-
Size
9KB
-
MD5
37aacbe510f22d77f4f2311a2c42afb0
-
SHA1
ad63328a14e385ae7d3d5cc8bdbdbcaf2c0b2fca
-
SHA256
6fa651b5480be0236fc99fa81ec704d03890d7e57b08a0487eb4510cbd029350
-
SHA512
f63b651bb9b513d5635ab3543d10611afd5eec61a2c5f41cc8e20049070dbf3b3fc7a501c67a5b381c6b60100f3b3d54191d9f55fef5055b84a4b0d0fa55a268
-
SSDEEP
192:h3dlzN+d9MOZVZpiVhYJOigmF37LsUPMMVD0bpnZP9GY:htl8d9M8piV2JOinNoUE4D07P9GY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 37aacbe510f22d77f4f2311a2c42afb0_JaffaCakes118
Files
-
37aacbe510f22d77f4f2311a2c42afb0_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 408B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ