memtest.pdb
Static task
static1
Behavioral task
behavioral1
Sample
4212e23d5a94cb9630d34219a8180b07_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4212e23d5a94cb9630d34219a8180b07_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4212e23d5a94cb9630d34219a8180b07_JaffaCakes118
-
Size
542KB
-
MD5
4212e23d5a94cb9630d34219a8180b07
-
SHA1
93aac19b3f72b559f882dcd2f9f512c23bd0f847
-
SHA256
f799d39d11ea394f57ef6b274e9f59c1fd7b2db1bdd2a94f93d8ac6b5e089522
-
SHA512
fc600f64e45efc76ae221cd370c9ee92ba732c9d20564e0c62c89a4324057c55366438b2a8f2d4fddc793ab23429e5f0958a2def48158282c8cf9aa1f0c159f5
-
SSDEEP
12288:bwfDcbkNP6sAl1ESCqrDkObOlasvjSxIYt1gRfkWCJwKqn69a8Ao:ucbkNSsAbLXo7kWg+6k8Ao
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4212e23d5a94cb9630d34219a8180b07_JaffaCakes118
Files
-
4212e23d5a94cb9630d34219a8180b07_JaffaCakes118.exe windows:0 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Sections
.text Size: 317KB - Virtual size: 316KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PAGER32C Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
PAGE Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 538KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PAGER32R Size: 1024B - Virtual size: 896B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.TPAGER3 Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE