net1.pdb
Static task
static1
Behavioral task
behavioral1
Sample
874497321c5789bd18c4faacece42ce2_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
874497321c5789bd18c4faacece42ce2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
874497321c5789bd18c4faacece42ce2_JaffaCakes118
-
Size
295KB
-
MD5
874497321c5789bd18c4faacece42ce2
-
SHA1
b93fde0cbc4ce0b3e662ceeba676645b4b81ee87
-
SHA256
06558b4acbdd9b87433d568f0b58a1b1968bb9ef3afbff86063127563b262615
-
SHA512
c7cb500d1b2d4e917c2a32bf20467ea1d5b970e94997eb47e2eb5dff34fbf0c298fe499a8db3be0c8226fb3c6e08838da06513297ca1dcd8a5cd1d6271c88925
-
SSDEEP
6144:bQF8QmIys7bhkNCb9fDCZ3qjOzapIUHsVLLXx5qnv8uVO:bpIys7b5DgEOz8Z2Pqn4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 874497321c5789bd18c4faacece42ce2_JaffaCakes118
Files
-
874497321c5789bd18c4faacece42ce2_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Sections
.text Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 15KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 968B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.wtq Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE