PrintFilterPipelineSvc.pdb
Static task
static1
Behavioral task
behavioral1
Sample
0f78d29b898daf34efe707885040afe7_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0f78d29b898daf34efe707885040afe7_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0f78d29b898daf34efe707885040afe7_JaffaCakes118
-
Size
812KB
-
MD5
0f78d29b898daf34efe707885040afe7
-
SHA1
7690ed090d4df29bd18d1c0e68eea6248cb33af6
-
SHA256
21239a6fb674db9bbb29e8e98275ba26c5c391d47e3d9f447f777a6dab52dcad
-
SHA512
ed854804e359068e586dab35497e5318e8c07be8eacc9f6900b9efa874df9a67daec8b278911f878fbc4b18ebb12b72b761f1db53d967cec8c44baf280868f64
-
SSDEEP
24576:9PxSUMmUVn0Zy7aubnReh4Vx+7JpqZW2L3FvyCUrdwq6M:9PxAmUVn0A7aubnReCVmqZjL3FfUrdwY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f78d29b898daf34efe707885040afe7_JaffaCakes118
Files
-
0f78d29b898daf34efe707885040afe7_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Sections
.text Size: 582KB - Virtual size: 582KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.tqn Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE