mini_installer_patch_3stage.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ef6edff3778351c450ed81bca99e67d7_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ef6edff3778351c450ed81bca99e67d7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ef6edff3778351c450ed81bca99e67d7_JaffaCakes118
-
Size
4KB
-
MD5
ef6edff3778351c450ed81bca99e67d7
-
SHA1
755aa4d4bd818b09ffb7a033623a72b4c055bff2
-
SHA256
ef20ec9455f94ba085c57e8c261a2ce0be141019ed64ecbbf2fbef1442d64a43
-
SHA512
03ae7b2a938abcbdc13720bc3ddc85e803278e8ba72bcda0ee613becd1b6e9654d24cca2835d5fa09cd3837c090b09b6289235b10cbe12188a3a69c94c87f1de
-
SSDEEP
48:abjl2h1bTudxweEAVi8/5HfLZkeUhZZhLZkHBdoPMBvM8q3WfJn6HbJk3XVQGuDr:NhBTusk5zSh94EEJI3M67YVQhDDclkIA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ef6edff3778351c450ed81bca99e67d7_JaffaCakes118
Files
-
ef6edff3778351c450ed81bca99e67d7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 205KB - Virtual size: 205KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ