CLIPSRV.pdb
Static task
static1
Behavioral task
behavioral1
Sample
fd224efa9a9204ca9c9d1a6aa18ab934_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fd224efa9a9204ca9c9d1a6aa18ab934_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fd224efa9a9204ca9c9d1a6aa18ab934_JaffaCakes118
-
Size
205KB
-
MD5
fd224efa9a9204ca9c9d1a6aa18ab934
-
SHA1
09a93166a91d94305f21d029cd9a35b7c90a01be
-
SHA256
fa3c49730f7f258ebfb1a7ccd6ff6242378e19219e45722995756c74acfe2732
-
SHA512
8e323c1bc34c8a30ed7dee0aef3742372796ef03e9a43dfe77ac321e2d167a7ab5203b0976c0a0671785a250d486d54d9a987b62df9c6f3017773604d4ff4e53
-
SSDEEP
6144:DiKgrxmxI3f3EFxbXhaCwiXZdELlyAojUCmlSdBiW9NEkW:+DxJvEF1Ra2JiLtWmlSxWp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd224efa9a9204ca9c9d1a6aa18ab934_JaffaCakes118
Files
-
fd224efa9a9204ca9c9d1a6aa18ab934_JaffaCakes118.exe .vbs windows:5 windows x86 arch:x86 polyglot
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rol Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE