C:\Users\Prash\AppData\Roaming\Microsoft\Windows\Templates\??6??q??D??.pdb
Static task
static1
Behavioral task
behavioral1
Sample
f818f7b3819e1e592405085eb2ee46c0_JaffaCakes118.exe
Resource
win7-20240215-en
General
-
Target
f818f7b3819e1e592405085eb2ee46c0_JaffaCakes118
-
Size
879KB
-
MD5
f818f7b3819e1e592405085eb2ee46c0
-
SHA1
d60e206c49d0854c1d78453293fa1a60f8690367
-
SHA256
043b4ebe5dc4f8bdcb17d1b2ac7a15687f6b28b4a63b6aff28e7ee891f137f99
-
SHA512
ea065d0d0de4ac6f1f7f20c5ae328b0487b0681900a6ca2c46becfc294c288d5b1abbd657e6cdfe84c843ce18403b17fe07b2672ac5b577faafb9980e1269ebe
-
SSDEEP
12288:xWKLZtekzyNIBZM6PwLzHg8n9RVwoiaFcZPzw19oqEtOnVGvQnX5+:xWKfekzXBPwLzAWRVHmZ8/onk2QnX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource f818f7b3819e1e592405085eb2ee46c0_JaffaCakes118
Files
-
f818f7b3819e1e592405085eb2ee46c0_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 877KB - Virtual size: 876KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 964B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ