t:\setupexe\x86\ship\0\deployca\odeploy.pdb
Static task
static1
Behavioral task
behavioral1
Sample
3bfe169c68162b623a47978810f01b51_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
3bfe169c68162b623a47978810f01b51_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
3bfe169c68162b623a47978810f01b51_JaffaCakes118
-
Size
401KB
-
MD5
3bfe169c68162b623a47978810f01b51
-
SHA1
77cc4e7f6f19599db95d35cd3cc560fe749529b8
-
SHA256
134d6cbdf8bbc0fc0e0115d5bb46c8aedf91f948f5f6edb3bbdc1cded05ea642
-
SHA512
5b027f458a3f8f5b359d8e6c4e6d4cc4b960294a45b76d729cc4dd1364cf14266c80bf9afcdf5c011f55200332846514eec991abaa587afc23d0c5fd869559e4
-
SSDEEP
6144:dCnqJQYU68weJ3pxyN90vE4hlscF9h96yuRA0UJfl9ZTe/qB:dCq/r89y90LaE9h9CA0UhlDXB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3bfe169c68162b623a47978810f01b51_JaffaCakes118
Files
-
3bfe169c68162b623a47978810f01b51_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Sections
.text Size: 126KB - Virtual size: 125KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 82KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.spm Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE