format.pdb
Static task
static1
Behavioral task
behavioral1
Sample
30e4f8a38c07c3b8bc9f625ac0d92ac4_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
30e4f8a38c07c3b8bc9f625ac0d92ac4_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
30e4f8a38c07c3b8bc9f625ac0d92ac4_JaffaCakes118
-
Size
5KB
-
MD5
30e4f8a38c07c3b8bc9f625ac0d92ac4
-
SHA1
13344d27d58304a2646203f2d03a270630d0803a
-
SHA256
d440a614c1bb095909471749313e5fe1e44b087b6082d30cb5a4d1225c843d7a
-
SHA512
cc0d67c41e3c30968a425e4a4ea803e66afbc15c03719cdee898bef7f190e95591c9e16e6e3e7d53f0b4276bf0dafd47a49b296a960bbd446b9b0cc614b690a3
-
SSDEEP
96:b4CqR0KF0hk54v8aU2zbxLN7xvNj9wh1YB+QpUY0lC28bRb6:b4bNq8adzFN7FNxs1YB+FX8FbB6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30e4f8a38c07c3b8bc9f625ac0d92ac4_JaffaCakes118
Files
-
30e4f8a38c07c3b8bc9f625ac0d92ac4_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Sections
.text Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 80B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 984B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ