gacutil.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ba3c5fb0d1e96348135f4b217675910c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ba3c5fb0d1e96348135f4b217675910c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ba3c5fb0d1e96348135f4b217675910c_JaffaCakes118
-
Size
268KB
-
MD5
ba3c5fb0d1e96348135f4b217675910c
-
SHA1
e3d10efde4deae7a513a63a3bcfeb7453da8cb58
-
SHA256
da5caeb16b8263203bc99c79894d17d83097aa6d6b15af5e113dbb18f8e4d9f9
-
SHA512
ec50aecc9ed4d09bb89bf26db2154101724f69f23c3cf3026fb61d43d1f8bc26c861fa3436b90623f0a3485f8d45390b3ca82e0388b4409d427cf1020a9dc784
-
SSDEEP
6144:LA7b8YYeXEMWyFxOu2q0oWpaKRQpeFuuRk:E7HYRM9b2skQEFJRk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba3c5fb0d1e96348135f4b217675910c_JaffaCakes118
Files
-
ba3c5fb0d1e96348135f4b217675910c_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Sections
.text Size: 66KB - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rol Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE