proquota.pdb
Static task
static1
Behavioral task
behavioral1
Sample
0e8b9b214e47247e1d1b0c951382871d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0e8b9b214e47247e1d1b0c951382871d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0e8b9b214e47247e1d1b0c951382871d_JaffaCakes118
-
Size
222KB
-
MD5
0e8b9b214e47247e1d1b0c951382871d
-
SHA1
e3a97225f14980b9bf23c13f4deb8b09155f4b6d
-
SHA256
9cd59d410955dd1fcb6bff2e838971f50695f6f9a76ad940fe41af71f2519f9c
-
SHA512
106c136461ecd8c79113e523fff079e96d786e58e51885c1769dfd57e341d362f6a53367be7bd6a36bc59d414388cc53086d1112502e052429368722705b6dc4
-
SSDEEP
6144:G7xrgZz0D6e5jHHPmHobbmVRYaBzvnY7nZ:ixrU0+0eIyyiUnZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e8b9b214e47247e1d1b0c951382871d_JaffaCakes118
Files
-
0e8b9b214e47247e1d1b0c951382871d_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Sections
.text Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vsp Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE