U:\global\Release\bin\acad\Assist.pdb
Static task
static1
Behavioral task
behavioral1
Sample
0c5e04c1bb32465fe9411e3ebb4ff097_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0c5e04c1bb32465fe9411e3ebb4ff097_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
0c5e04c1bb32465fe9411e3ebb4ff097_JaffaCakes118
-
Size
239KB
-
MD5
0c5e04c1bb32465fe9411e3ebb4ff097
-
SHA1
b77f517ec76ffb2f06ab18290f4ef616037ff26e
-
SHA256
1500f71aa0799167c4a5beadb8a01c85547885e73f2b86602892ee9f2cb30c56
-
SHA512
34c29d44d4cb4c3cba0f431f334bbe9468a6b7200e7fd0de31a839e906c0a4f06f49998632f5fde44ea6f2b239e923ecc266f2e68a45233a86653365a0bfacd2
-
SSDEEP
3072:CxzyN/Xk9lh8d53yeAq1NriCrvftzlE7lg74omWX9dxgysbSmGm4a1F5mJ3qdqzR:Cxlh8LCFor9v9lmUmU9mvUaP4yMcTOsm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c5e04c1bb32465fe9411e3ebb4ff097_JaffaCakes118
Files
-
0c5e04c1bb32465fe9411e3ebb4ff097_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Sections
.text Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.heb Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE