uyhEOKDnxCGyZgRem.pdb
Static task
static1
Behavioral task
behavioral1
Sample
297051f6830b2eb05bc0df7fa7aaf531_JaffaCakes118.exe
Resource
win7-20240220-en
General
-
Target
297051f6830b2eb05bc0df7fa7aaf531_JaffaCakes118
-
Size
590KB
-
MD5
297051f6830b2eb05bc0df7fa7aaf531
-
SHA1
f1789f45cd5771e1a41c59bf5bbce9bdeee33f88
-
SHA256
e24b14a6b6b94da0b5cd5db79e856d8ea9df6d8d1308971a59ed0ab202b45643
-
SHA512
dfe9054949788328a73f078e671c0c8993aaa6ef11076d065877b8256dfabf4ca5e4c2e6ec210fff8620db99d8823a6a3181d151bf40c7a867687b1c0d5820e8
-
SSDEEP
12288:D45BTx/i6u9xugEIyiPKDClYPa5/+CPcHDgy0S+Ckpo9wI9txMpwJXeu:sE6SIihYdqqNKpV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 297051f6830b2eb05bc0df7fa7aaf531_JaffaCakes118
Files
-
297051f6830b2eb05bc0df7fa7aaf531_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 493KB - Virtual size: 492KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 95KB - Virtual size: 94KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ