C:\Users\Administrator\Desktop\Client\Temp\BZynUIbYGL\src\obj\Debug\ApplicationSecurityManag.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2ff83d3323dc8b30d6d346e5a5bbdac8_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2ff83d3323dc8b30d6d346e5a5bbdac8_JaffaCakes118.exe
Resource
win10v2004-20231215-en
General
-
Target
2ff83d3323dc8b30d6d346e5a5bbdac8_JaffaCakes118
-
Size
336KB
-
MD5
2ff83d3323dc8b30d6d346e5a5bbdac8
-
SHA1
fca11f9aa7e26db129dd9690cd821e72c10c5118
-
SHA256
d2c6f340f3de10a5b1ff6e5866f0f4757c0486b0bf7c664d9e697f1e44c64f8e
-
SHA512
1a7547f39c665fd8b44cc9d421ee23eff7949ae425f651034542afa404ea7f3807fec17626b41c6ab6d874786a15f2b2a9c0548d8bce5c4579f1ef7fba577708
-
SSDEEP
6144:DVKqYJ6R7b+GclepRc0Va40n6qzpNZnbhN0db+dBAk9wcHd0jUY:DVKqYJ6R2GclezZa4s6qNNZHS+p9wk0t
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ff83d3323dc8b30d6d346e5a5bbdac8_JaffaCakes118
Files
-
2ff83d3323dc8b30d6d346e5a5bbdac8_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 333KB - Virtual size: 333KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ