C:\AppData\Roaming\WTF\GoodMorning\obj\Release\OAs.pdb
Static task
static1
Behavioral task
behavioral1
Sample
27341808910d5f9cfe62d2403c37c763_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
27341808910d5f9cfe62d2403c37c763_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
27341808910d5f9cfe62d2403c37c763_JaffaCakes118
-
Size
61KB
-
MD5
27341808910d5f9cfe62d2403c37c763
-
SHA1
5c05eb0cce133fa0633d0687a1d32228d2ecdd83
-
SHA256
5b80c1a32deccfd1f82f9854e9091026cc9e609c5aeb3b407b086fa61c95b1c7
-
SHA512
efccd5497c205b2a80d42645738e7d11e4628dab5f4cb091f53c9fb9ad8873cf2b606fb133dbaf8b1817bc68e7507d8c8b4bab0f752fd9171eee0f77bf561074
-
SSDEEP
1536:uX0gwKRiH1vP54oxNUZqk095e8MV4UPCjQF:ukgNRiJ54oTIoUPC8F
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27341808910d5f9cfe62d2403c37c763_JaffaCakes118
Files
-
27341808910d5f9cfe62d2403c37c763_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ