setup.pdb
Static task
static1
Behavioral task
behavioral1
Sample
8df0979ef0fdb20fdcf2370a0c28e16b_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
8df0979ef0fdb20fdcf2370a0c28e16b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8df0979ef0fdb20fdcf2370a0c28e16b_JaffaCakes118
-
Size
195KB
-
MD5
8df0979ef0fdb20fdcf2370a0c28e16b
-
SHA1
c8061076f39151b1c1dc6b696e7490267a48bc2e
-
SHA256
2f723003b5c472bab748301c6cd53c1349afbd500c2a57e6c3710a99f2295a13
-
SHA512
155fc8415559d7a44ea8f3cdb89169fdd642caa1ea29842afe7e1af155e687825d45c2f072b6a2dbfdb46743bcfdcd7880c2de0c48fd161f4a4daf20669ce461
-
SSDEEP
3072:9DAOcSs8tc3gI3UIk6upgu+BtEyx2xbMdsQR4t/atXA9sQKKcn:lBcSdtUgfIk6GCBes2xMdLRmkw5i
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8df0979ef0fdb20fdcf2370a0c28e16b_JaffaCakes118
Files
-
8df0979ef0fdb20fdcf2370a0c28e16b_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Sections
.text Size: 283KB - Virtual size: 282KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 130KB - Virtual size: 129KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ