wmpshare.pdb
Static task
static1
Behavioral task
behavioral1
Sample
600ec012a1a94be8987e92bd091ad2f7_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
600ec012a1a94be8987e92bd091ad2f7_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
600ec012a1a94be8987e92bd091ad2f7_JaffaCakes118
-
Size
196KB
-
MD5
600ec012a1a94be8987e92bd091ad2f7
-
SHA1
ecb2fdcecea7eb428aa56dcfd16b6d1bd30581d1
-
SHA256
4183c69b0144bd05386b7ebb7c98804a1a61cd8ba68213b99ecc4dc90bf60262
-
SHA512
4826eaf21dd6c0180ac1c420c7292efa55e0f34e93b4210acff2eb8eb5a0ca131f04b708e90ff04fdd19b0a532b958d6a9033c9d33b82b1d06aab2f1276264ab
-
SSDEEP
3072:GN336MdMfLiraviyxI7C0/rhovM+pPgpn9X5E9T8kArP+P1KDk+YscoW:wqqULirpgI79rrA4pn9X5E9T85icDkNT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 600ec012a1a94be8987e92bd091ad2f7_JaffaCakes118
Files
-
600ec012a1a94be8987e92bd091ad2f7_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 80B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ