applaunch.pdb
Static task
static1
Behavioral task
behavioral1
Sample
6377105f7faf49a4b09aac6ddbc63403_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6377105f7faf49a4b09aac6ddbc63403_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6377105f7faf49a4b09aac6ddbc63403_JaffaCakes118
-
Size
7.0MB
-
MD5
6377105f7faf49a4b09aac6ddbc63403
-
SHA1
44ef74ed0eda883529e50b5b233d36e8fdd45a5d
-
SHA256
ee8fff2003210e6c013c024547228a00c6f142cdc06bbd2ce72deed1423fcd84
-
SHA512
3c753c70540850f411b349e7522ccedcbaad7e2ef0a295cf4b4b2aa38a8fe85ab4b0acf10375498cf4a983bd5ef73a85e06298f4be5f3e40aa19b725aba9034b
-
SSDEEP
98304:KvDllZPOy3POlmMrm1RF4VsRXTHgNDfXQ1veFPk5FaoCRrgGUDxy:KvDllZPzP8yHF7iDfgZeVmCJWly
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6377105f7faf49a4b09aac6ddbc63403_JaffaCakes118
Files
-
6377105f7faf49a4b09aac6ddbc63403_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Sections
.text Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ