c:\Users\Administrator\Desktop\Crypted\qwait.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ff14a64fae2cbab96faf836e1fa503d4_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
ff14a64fae2cbab96faf836e1fa503d4_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
ff14a64fae2cbab96faf836e1fa503d4_JaffaCakes118
-
Size
271KB
-
MD5
ff14a64fae2cbab96faf836e1fa503d4
-
SHA1
3d03caa1082c0f30ae6c635b3231cc4a23dfd7f3
-
SHA256
a395d8d321a50a4b781dd8a7a5af704aa95a11c6a79cd834273f2772f926c1fd
-
SHA512
be0aadb908274bd0f3dcfd15962fe135aa7ddd5279dc531b0e3f4a152b81505f32a9bbdfa79e0bfb83b2709c6f1404d88080fb126e00e136f50527114730337b
-
SSDEEP
3072:3AjTOriMNII+aujOzXRvYnvjnvOJ1U2oUwNsQiiZqNM51KOr/b:STYiMCawOztwjvOJ1U29MdiiZz51KO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff14a64fae2cbab96faf836e1fa503d4_JaffaCakes118
Files
-
ff14a64fae2cbab96faf836e1fa503d4_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 266KB - Virtual size: 265KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ