spupdsvc.pdb
Static task
static1
Behavioral task
behavioral1
Sample
1388e1eaa885fd4ea586ca4f16e01685_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
1388e1eaa885fd4ea586ca4f16e01685_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
1388e1eaa885fd4ea586ca4f16e01685_JaffaCakes118
-
Size
199KB
-
MD5
1388e1eaa885fd4ea586ca4f16e01685
-
SHA1
bdd89c42fcb29201b6ee80df60d7e29a95a24564
-
SHA256
bfd90bbd1913dfd5e5ad3ae5d7665b504925c792b9bbf9b9122b4ac576d075bb
-
SHA512
22cc2b0bc887b49a2ce4ff2af1164c603fc556b06d5203af5828c6ba54b10c40e4174a116191e7b2abcb3fa196f270065113990154610d2b65178c11df0ce171
-
SSDEEP
3072:HWIUt8HafOafabW9OaPQWrdKyx8WfnKQWktqo3ZDGsQsBG7QIlH0T52Aw3gionN+:2ISRzSbUM+dKyx8QkkAVlUdw3gio8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1388e1eaa885fd4ea586ca4f16e01685_JaffaCakes118
Files
-
1388e1eaa885fd4ea586ca4f16e01685_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 992B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.lif Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE