C:\Users\yous\Desktop\nu.pdb
Static task
static1
Behavioral task
behavioral1
Sample
20d05ad547fa0c8655c99909dac10378_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
20d05ad547fa0c8655c99909dac10378_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
20d05ad547fa0c8655c99909dac10378_JaffaCakes118
-
Size
244KB
-
MD5
20d05ad547fa0c8655c99909dac10378
-
SHA1
4a30c636ccd822091102bfe27a07549b412189eb
-
SHA256
d82353bb25572e817e035ec1aeb6a964c657643610b9813277f347e6893775f3
-
SHA512
5d543a5ab06c9bc02f127e3923a65562dc4455956b120fea2e7c0e210ef052f735f5e8ee42392ed9b30240ba34c04fb096ae785a56a8bac95f58f3ce0959c02c
-
SSDEEP
6144:filxr9bNYZHk8hph5S30dglBJilDc3LHt:filxrUHkwp4VJiUbt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 20d05ad547fa0c8655c99909dac10378_JaffaCakes118
Files
-
20d05ad547fa0c8655c99909dac10378_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 228KB - Virtual size: 226KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 4KB - Virtual size: 81B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 656B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ