C:\daz_yeluti\bac\20\fivuwulozenu88-civ\horerupopedadi.pdb
Static task
static1
Behavioral task
behavioral1
Sample
f6fd5063b3d1bdab8ff3bb8511333a23_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f6fd5063b3d1bdab8ff3bb8511333a23_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f6fd5063b3d1bdab8ff3bb8511333a23_JaffaCakes118
-
Size
61KB
-
MD5
f6fd5063b3d1bdab8ff3bb8511333a23
-
SHA1
f61a130942abb82a9d88bc849156d1e6aa078794
-
SHA256
3783ed6e7e28952f1dc8ad0be7fa7e3a98af4c0e0823bf6df127520da1c45307
-
SHA512
1cafaec558871516b486e7ac90ed73e3e45574cb59ec1a8e3f7d9e6850926989e26c33deffd17b91c63b15c6bf3e0e5abd4877602bdca428f2b87cc98c13955f
-
SSDEEP
768:e9r9ZWs/rQeaGKtpHRz0Zwhi675hVI62jV9yzUkFSAHpuLbDfzBzf5w0k8xcHEMt:W//rQeaGKqsdBf2jV9y6AH0L3z5NckTs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f6fd5063b3d1bdab8ff3bb8511333a23_JaffaCakes118
Files
-
f6fd5063b3d1bdab8ff3bb8511333a23_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Sections
.text Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 19KB - Virtual size: 4.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ