Gsp.pdb
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_508e074c87016898702c53997d935b2db3ab7b6606b818d6ab5affc4353ecfec.dll
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_508e074c87016898702c53997d935b2db3ab7b6606b818d6ab5affc4353ecfec
-
Size
158KB
-
MD5
36fd5b11d27ed418bf04d125f9fda41e
-
SHA1
706cfd5d2f39c3dddf4beeb2b42dc8e25199f020
-
SHA256
508e074c87016898702c53997d935b2db3ab7b6606b818d6ab5affc4353ecfec
-
SHA512
9269cc6c214e67c010e3980a97e23c50f15c4b3692610ded2ff6615ed466af05e166a4cf9a59c390740f1b6dd70046ac9eae3b1a3cfed2ffcc02fcf2f3af9cd2
-
SSDEEP
3072:0iFieJeVDC5PIh/31VeSDH2jW+zsKWncDlRe0PLDt:3eAU/TeSH26cs+7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_508e074c87016898702c53997d935b2db3ab7b6606b818d6ab5affc4353ecfec
Files
-
JaffaCakes118_508e074c87016898702c53997d935b2db3ab7b6606b818d6ab5affc4353ecfec.dll windows:5 windows x86 arch:x86
f71b9cb9891e9cf4bae79d2b5aa115c6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
advapi32
RegLoadAppKeyW
ole32
CreateStreamOnHGlobal
opengl32
glVertex3f
kernel32
OutputDebugStringA
CloseHandle
LoadLibraryExA
GetProfileSectionW
OpenSemaphoreW
GetModuleHandleW
user32
TranslateMessage
Sections
.text Size: 140KB - Virtual size: 139KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 5KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 832B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 312B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ