d:\dbs\el\oc\target\x86\ship\postc2r\x-none\setlang.pdb
Static task
static1
Behavioral task
behavioral1
Sample
fa8150e8b444e13b419d2684a6254e9b_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
fa8150e8b444e13b419d2684a6254e9b_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fa8150e8b444e13b419d2684a6254e9b_JaffaCakes118
-
Size
3.0MB
-
MD5
fa8150e8b444e13b419d2684a6254e9b
-
SHA1
58549547b3b99dc4c63f2bcdc098e6e156f59350
-
SHA256
f48c6269acb722c7fa862542d29d916ce09cba4b68eb82c50bd66e821b52e084
-
SHA512
4eb45a939e8480f0b8aa11d24983b1316952cb0e17e4883a56a71a0f2cbe0600febea64c1430ae2dbaef77ad307281acb2c33735dc2c203398589836200e091f
-
SSDEEP
49152:SWuKPzvoS7hDkYOMwwnMb4PmyVEHF+3j5D78OBUC/IabjKoh9WsY:lzws+YOXwnS4rVoCs1SIabjKoh9WsY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa8150e8b444e13b419d2684a6254e9b_JaffaCakes118
Files
-
fa8150e8b444e13b419d2684a6254e9b_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.c2r Size: 512B - Virtual size: 300B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ