WUDFHost.pdb
Static task
static1
Behavioral task
behavioral1
Sample
a3c7439557195cbfd48f90cb254696e3_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a3c7439557195cbfd48f90cb254696e3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a3c7439557195cbfd48f90cb254696e3_JaffaCakes118
-
Size
312KB
-
MD5
a3c7439557195cbfd48f90cb254696e3
-
SHA1
d510bacf8e7cd3fbcd732b025ef822cc75c420d6
-
SHA256
eecd61ad99f199f894859710deeef746fec3af68c80a9c5e5121a67e0861d456
-
SHA512
2989c6692e6bd319207aac9cc8bbed3bbd91b6c6646c69d79ece526508804b9b1a5a83a7c6d806bbbef845cf42497f8fd449aa16188da9bf606972ee1cb830da
-
SSDEEP
6144:gNk4+EQbVoWsL/cKn+1+1ssJtKOvyF8FweLSj/k9/:oooZ/+UusJtIKFXWjS/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a3c7439557195cbfd48f90cb254696e3_JaffaCakes118
Files
-
a3c7439557195cbfd48f90cb254696e3_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Exports
Exports
Microsoft_WDF_UMDF_Version
Sections
.text Size: 127KB - Virtual size: 127KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.ifc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE