applaunch.pdb
Static task
static1
Behavioral task
behavioral1
Sample
197aad87242d2db66633759de0f6b67e_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
197aad87242d2db66633759de0f6b67e_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
197aad87242d2db66633759de0f6b67e_JaffaCakes118
-
Size
14.5MB
-
MD5
197aad87242d2db66633759de0f6b67e
-
SHA1
69287bdf0b2cfc8b92caeb6ee5fe6e3e1176e89b
-
SHA256
051076d24a9deed8b62a5a8d3b3d7f0bbd914e8820e40509c6855e346911a37d
-
SHA512
39fadf6a1497619712f806278985ac45f7d231ca2309f738a0699324331ad0bbe0913c93f216fef8d524943d43c28f227849ab6eca4c588ec215ac7be2ccd4cc
-
SSDEEP
98304:KvDllNcQww2UHgOSzMcOe8DHgOwvDllNcQww2UHgOSzMcOe8DHgOlLDmq:KvDllzV2Ub0gbwvDllzV2Ub0gboq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 197aad87242d2db66633759de0f6b67e_JaffaCakes118
Files
-
197aad87242d2db66633759de0f6b67e_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Sections
.text Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ