WinFXDocObj.pdb
Static task
static1
Behavioral task
behavioral1
Sample
de8d1ced9a084686b670afc3abbeadad_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
de8d1ced9a084686b670afc3abbeadad_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
de8d1ced9a084686b670afc3abbeadad_JaffaCakes118
-
Size
376KB
-
MD5
de8d1ced9a084686b670afc3abbeadad
-
SHA1
a32727f609de27cc77d8354d7a2c0a8fb4d70c3b
-
SHA256
b282aa2cf21ecb6f13ca48b9f601a47e0f9111e210ab69da86251363e291e3c5
-
SHA512
6ac0015e6831d46e627f543e0d2b773cd52e30792a348d7fdf408dc43997953024a0b3291bc1366cda69f1c11b3d82b2ba5c4080403371e86e8b45eca3ba7e88
-
SSDEEP
6144:nbksd6DrhpacgTGAidEl3yNhtFUaOrj0lMGWx1LllUC6xfhAoL/edTGnDrvJ/ms:bzdB3yNhtcj0lM5x1ACecTgDl/ms
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de8d1ced9a084686b670afc3abbeadad_JaffaCakes118
Files
-
de8d1ced9a084686b670afc3abbeadad_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Sections
.text Size: 122KB - Virtual size: 121KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.nkh Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE