Gsp.pdb
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_0776024f87aed5e51a46097ec0de6e0749f27a2eb1cb8eaccf456c5d2b92043d.dll
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_0776024f87aed5e51a46097ec0de6e0749f27a2eb1cb8eaccf456c5d2b92043d
-
Size
158KB
-
MD5
7e040f90e8d302196a9d75281716ce07
-
SHA1
dafeeaff07e6384511c6e02b31e9fc56f991462f
-
SHA256
0776024f87aed5e51a46097ec0de6e0749f27a2eb1cb8eaccf456c5d2b92043d
-
SHA512
6ddfecb280eac8d5a82f8321483729eb2487f5c9b8113fa2b4e5267bd40adeb503707d6cc14833ad7192089945ba1ba9b74e5c6e3d184e5c5341ad8c78f51828
-
SSDEEP
3072:4iFieJeVDC5PIh/31VeSDH2jW+zsKWncDlRe0PLDt:DeAU/TeSH26cs+7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_0776024f87aed5e51a46097ec0de6e0749f27a2eb1cb8eaccf456c5d2b92043d
Files
-
JaffaCakes118_0776024f87aed5e51a46097ec0de6e0749f27a2eb1cb8eaccf456c5d2b92043d.dll windows:5 windows x86 arch:x86
f71b9cb9891e9cf4bae79d2b5aa115c6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
advapi32
RegLoadAppKeyW
ole32
CreateStreamOnHGlobal
opengl32
glVertex3f
kernel32
OutputDebugStringA
CloseHandle
LoadLibraryExA
GetProfileSectionW
OpenSemaphoreW
GetModuleHandleW
user32
TranslateMessage
Sections
.text Size: 140KB - Virtual size: 139KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 5KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 832B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 312B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ