mddo.pdb
Static task
static1
Behavioral task
behavioral1
Sample
675a4bcf95c70f1f82394a4045807737_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
675a4bcf95c70f1f82394a4045807737_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
675a4bcf95c70f1f82394a4045807737_JaffaCakes118
-
Size
60KB
-
MD5
675a4bcf95c70f1f82394a4045807737
-
SHA1
92fa709b034ceb42581a0fc6d04f9d039b7e4ba9
-
SHA256
6ffb80d6234b9fac8ff2378ef0cc5fe438b87ee8e5079e41cdebcd2afe9d71d3
-
SHA512
676cc78f9a7c26d7905c8e55ed43a3cb0485b68d4b2171b9ae45edd05e50111103458dfad683ccecfdb49c80aa6ae6c0a268f770aec61ee49b3fa8e6a1f602f4
-
SSDEEP
768:6jLEFZAFu5p2bE4+/t/Fh+VOPljZD5auvONVhzJhMumGAPCm:GEFZ8u72bE4+/FFh+gPFzAJHgPCm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 675a4bcf95c70f1f82394a4045807737_JaffaCakes118
Files
-
675a4bcf95c70f1f82394a4045807737_JaffaCakes118.exe windows:4 windows x86 arch:x86
c2fe0ac855f65a78192113fd67d83fb5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
ExitProcess
HeapAlloc
GetProcessHeap
HeapFree
EnumCalendarInfoExA
CreateTapePartition
WriteFileEx
ReadFileEx
CreateFileA
Sections
.text Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 604B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ