applaunch.pdb
Static task
static1
Behavioral task
behavioral1
Sample
415772f3144e84f722ad462d3f4205a1_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
415772f3144e84f722ad462d3f4205a1_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
415772f3144e84f722ad462d3f4205a1_JaffaCakes118
-
Size
8.6MB
-
MD5
415772f3144e84f722ad462d3f4205a1
-
SHA1
7aa71d60aff3b8cdb09d2675bbce8960e1652719
-
SHA256
72d3b4e6927b2969da3a41cd41559128369b1ced688dcd3352ed42613818a22e
-
SHA512
ef171173159f778de56d7df8ae0b311e64f3b7ae455e20f6e280d5d23dfb5bb8bcfb24bad3ad010226f746312e6992a18b76d53f464d172c6c7d08e38f3fa3f9
-
SSDEEP
98304:KvDllNLK+JLDzMcOe8DHgPOOPom9BTEGsg2z3QV55IRx55d7PLi:KvDllU+7oAPB3/TEXzk5IRRtzi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 415772f3144e84f722ad462d3f4205a1_JaffaCakes118
Files
-
415772f3144e84f722ad462d3f4205a1_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Sections
.text Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ