d:\sogouime36\Bin\SogouInput\ScdViewer.pdb
Static task
static1
Behavioral task
behavioral1
Sample
059ffeaa99f8e25e41d502b774f478db_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
059ffeaa99f8e25e41d502b774f478db_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
059ffeaa99f8e25e41d502b774f478db_JaffaCakes118
-
Size
373KB
-
MD5
059ffeaa99f8e25e41d502b774f478db
-
SHA1
4b444f15ee16acea9a82580d6bff45a5999bd47e
-
SHA256
354d401cbd9bdc70c2fb8163461206f239ab1358d1004e78b295bfa02cfc695c
-
SHA512
5944d58b37f35fc5636942d45fbb56ff2c7b962481404d8c9a1db7ac5b5a61cace10300a8838331a1bdc931e40ab1b7e821b0550d2630c31d0ec024ce4a254dd
-
SSDEEP
6144:b4Ve+yuzCZ2bPl2NRKFw3Yczql3ZZ+0ejonEYZQwHj1uoT:biVyuzdLl2NRzo8Y3ZZN2orpj11T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 059ffeaa99f8e25e41d502b774f478db_JaffaCakes118
Files
-
059ffeaa99f8e25e41d502b774f478db_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Sections
.text Size: 136KB - Virtual size: 133KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.oli Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE