ServiceModelReg.pdb
Static task
static1
Behavioral task
behavioral1
Sample
bfb1d588657825a2b125194b39d958fa_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bfb1d588657825a2b125194b39d958fa_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bfb1d588657825a2b125194b39d958fa_JaffaCakes118
-
Size
1.6MB
-
MD5
bfb1d588657825a2b125194b39d958fa
-
SHA1
00098a7badfef5fd0dd800e30722f82dd9bd95a2
-
SHA256
c8a57594597aeca2bc641d519142d2c596be818e78113732b688d8a8a1802ca0
-
SHA512
3eec5b60c654ea27fbf3238a02e35f2ffabce32f40cc95d72d47dcd52adb4995fbf74f5dced4042bf9f7f2de5adf6a97727c7153698358f31ecad591de59b69a
-
SSDEEP
24576:TlwHzLfUwWvWL0vbzoJdXN0BN2qnw4a+edxoBrLdgg:SHzLfU7A0vbzoJdXN0BMOwLloBrug
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bfb1d588657825a2b125194b39d958fa_JaffaCakes118
Files
-
bfb1d588657825a2b125194b39d958fa_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 48KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ