c:\users\box\documents\visual studio 2010\Projects\Macros80\Macros80\obj\x86\Debug\Macros80.pdb
Static task
static1
Behavioral task
behavioral1
Sample
208e31956bf079b540ed05be0c8cbce7_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
208e31956bf079b540ed05be0c8cbce7_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
208e31956bf079b540ed05be0c8cbce7_JaffaCakes118
-
Size
198KB
-
MD5
208e31956bf079b540ed05be0c8cbce7
-
SHA1
daad499e88aeab98d026c7cab8155cf3dcafcd91
-
SHA256
fb161600a1cf6629e07bdbdcc5d4bd6afc7a30b8760b27b0ab2fb5fe40e1040d
-
SHA512
710cb414e73b9a42297c303d8a65162a731dc9bbe186b31a7cf57b8263f21eab36e0ed13b23cf2dcb640269de7d1ed455e4912dc9420be8cfe131fc9314b5eab
-
SSDEEP
6144:94ALZAnS69l4P3olE+gmgKH0ySM4PT0P4bH/KXUWWWWWs0WWWWWWWWWuH:ruT9iPfqgKH2G4jKCwH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 208e31956bf079b540ed05be0c8cbce7_JaffaCakes118
Files
-
208e31956bf079b540ed05be0c8cbce7_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 193KB - Virtual size: 192KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 148B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ