C:\Users\$USER$\Desktop\D.pdb
Static task
static1
Behavioral task
behavioral1
Sample
e9bead14a5bf3b03fdf909e52f64ca61_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e9bead14a5bf3b03fdf909e52f64ca61_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e9bead14a5bf3b03fdf909e52f64ca61_JaffaCakes118
-
Size
184KB
-
MD5
e9bead14a5bf3b03fdf909e52f64ca61
-
SHA1
54d90a151797fd3809362d809f296afd4f957cce
-
SHA256
9821b2354915389d97b64d99dd0b471034d55df8c34801b7ef70203497508346
-
SHA512
20acf68db2d5034a080f01ee9fdb709108c3ca6c2c82dd2d4c07ad4f9a26dd871733e23f2256db9270a1dbece63e90fba78432dd156ab5122015f0f8f0d3c32b
-
SSDEEP
3072:90hYWSRxLVBG7KoWmmK+Tou/zKhhvZkqTlDBOJ7aAzv9Lz8V:oYfRJm7JW7zmY4d8NFY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e9bead14a5bf3b03fdf909e52f64ca61_JaffaCakes118
Files
-
e9bead14a5bf3b03fdf909e52f64ca61_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.rsrc Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 136KB - Virtual size: 135KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ