GPU-Z.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2d3271c7cb4f502a7a1db6bda1a43697_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2d3271c7cb4f502a7a1db6bda1a43697_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
2d3271c7cb4f502a7a1db6bda1a43697_JaffaCakes118
-
Size
1.1MB
-
MD5
2d3271c7cb4f502a7a1db6bda1a43697
-
SHA1
0d92b900cba47af9ece16f867ca9860f86c03dd3
-
SHA256
11fe7f5e9be6ee4259d16c4220672cc50813131de74c597e20dd3821aa215794
-
SHA512
d1ceab9e9db9162d8c8dbe6a3d7921c1c2bdfe942d6ec3aa9bae2ed3704a5bf1d8378d2120a6ce841620f3e9ecb1e0a7ca1232e07cb4a44c92a4939be596f5fd
-
SSDEEP
24576:azgTT3VRdCRcMO6YY5NYttpI5O+p1efZ8whpd:azoT3VRkKMp15yGW7Hd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d3271c7cb4f502a7a1db6bda1a43697_JaffaCakes118
Files
-
2d3271c7cb4f502a7a1db6bda1a43697_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Sections
.text Size: 868KB - Virtual size: 3.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ifc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE