GoogleUpdate_unsigned.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ae953a4b88d41b2b636443b4ffd34d17_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ae953a4b88d41b2b636443b4ffd34d17_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ae953a4b88d41b2b636443b4ffd34d17_JaffaCakes118
-
Size
306KB
-
MD5
ae953a4b88d41b2b636443b4ffd34d17
-
SHA1
73365d002e641bb96a73c61697e4ee40722c371a
-
SHA256
774420dba809939b2c1bcdb97cdacabf13ebd0147dd12c9772daf54b728f9363
-
SHA512
9a67ff6938624a9aa1c86fe1c16cc326ac259d92aa886df23cb13f13fb1149a205afd443e8edb7915f0333680477a5bc7c3e2f1110d9bcf646365d7cac1da348
-
SSDEEP
6144:i9Zb5x7i+mu5+bT53Ygk1tPPEdwmjtuzNuczZKrV:inD7i+mcu53YT1tPP27xuzMV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ae953a4b88d41b2b636443b4ffd34d17_JaffaCakes118
Files
-
ae953a4b88d41b2b636443b4ffd34d17_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Sections
.text Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text/DE Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 57KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.jgd Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE