pdb.pdb
Static task
static1
Behavioral task
behavioral1
Sample
3ea2e7250de101fc2862c4da04737f08_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3ea2e7250de101fc2862c4da04737f08_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3ea2e7250de101fc2862c4da04737f08_JaffaCakes118
-
Size
550KB
-
MD5
3ea2e7250de101fc2862c4da04737f08
-
SHA1
3bbb06a43da079a9211336e3fabb323b6ec56e55
-
SHA256
0497f56a1d9b91eccc911fe4d6c31832a50d2b269c86d9a0dc304833135925b3
-
SHA512
d91e5d1b4595c65d9470572b86076929bef42b3964ead6bec475a1d33c67b02a2175acb2728913971cc6c82dd7b6481b14d1a0a2e18f214f56f1c807978dbc81
-
SSDEEP
6144:g+/KVSyvCi0vji083cx06oMfGGHTBcvOTftgf98RxsONxdOwRRMfhF3jiXcChb:gukLvTIu0r02GJOgV8R2ONT9z06XcCV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ea2e7250de101fc2862c4da04737f08_JaffaCakes118
Files
-
3ea2e7250de101fc2862c4da04737f08_JaffaCakes118.exe windows:4 windows x86 arch:x86
28a105013b778a397906b8120bf02776
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetProcessHeap
HeapFree
HeapCompact
HeapAlloc
msvcrt
memset
Sections
.text Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 492KB - Virtual size: 491KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ