HelpSvc.pdb
Static task
static1
Behavioral task
behavioral1
Sample
baecb340bb17042508aa43c0c9dd1395_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
baecb340bb17042508aa43c0c9dd1395_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
baecb340bb17042508aa43c0c9dd1395_JaffaCakes118
-
Size
900KB
-
MD5
baecb340bb17042508aa43c0c9dd1395
-
SHA1
0e68e2e0ea957dce3bec8e1181f2ac3b3c8e2f02
-
SHA256
06d7e1b1752d62561fa94de79777035bbb8c263efed5fc0cd29bf000dc5e7924
-
SHA512
4519497be2dbe383ef8c7bbba27672c9966e0654a7044e3212bed42510262ed2a9fac24faf97205753761f703a867827cbb0577f112ea9c24a84eda1644cc54a
-
SSDEEP
24576:Jh1NP4nakObDzBm/8G1U+M9FmG3PT0wOqQ8ERJnsA5uUUEAaoF1:bP4ncV9Fv0wN92sqcEA//
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource baecb340bb17042508aa43c0c9dd1395_JaffaCakes118
Files
-
baecb340bb17042508aa43c0c9dd1395_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Sections
.text Size: 637KB - Virtual size: 637KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 22KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.uro Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE