d:\Develop_Server\Service_BCHelper\app\Release_unicode\Service_BCHelper.pdb
Static task
static1
Behavioral task
behavioral1
Sample
8a00af55cb40213b9e9c547aab14b25a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8a00af55cb40213b9e9c547aab14b25a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8a00af55cb40213b9e9c547aab14b25a_JaffaCakes118
-
Size
1.4MB
-
MD5
8a00af55cb40213b9e9c547aab14b25a
-
SHA1
f866e0df5a7461ea531966d15bb41f589747d6b2
-
SHA256
da3361bdc084f0e028a9ef278ac23dac55d12b6280f221b5482a80d34f1c5fe8
-
SHA512
44a07eba72be82d5d0ba44e7cebc52c457d658d8ef81ac8a2e33c968505396d9f90d4074da812f19f7d39ac0c83c5770ac6c14c497400debe2ce0bf2497b0af6
-
SSDEEP
24576:1V4nRKE0c2XmpwpphxnGWDixgMkhvfkfQI/1+ME0Y0O7MFcTwVBwPCfC62b6U9:ZE0PXHpphDmOhnkQI/AMHBO7M2Tw/wPz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8a00af55cb40213b9e9c547aab14b25a_JaffaCakes118
Files
-
8a00af55cb40213b9e9c547aab14b25a_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Sections
.text Size: 841KB - Virtual size: 840KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 264KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 27KB - Virtual size: 318KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 2B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 126KB - Virtual size: 126KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.mjg Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE