C:\Users\aschmidtriess\AppData\Local\Temp\vs1355.tmp\x86\Release\RegisterDLL.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2b28cccafdf6344503b2f5288aeef7a5_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2b28cccafdf6344503b2f5288aeef7a5_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2b28cccafdf6344503b2f5288aeef7a5_JaffaCakes118
-
Size
11KB
-
MD5
2b28cccafdf6344503b2f5288aeef7a5
-
SHA1
506af370a5f321b4b6e363e3a000606657ea6742
-
SHA256
8c57e24cd194bcfe93d4cf188a88d8ec03703d3faba6ed3897500d745040557a
-
SHA512
d407ef583cdbeac48308d55ac968a31d5349cc5ad4867a411a821e1ca0a60b0f15b476c9be041833a85b342fd21d212fc3b0c2823c2cdfdfc5ba389343a24ef6
-
SSDEEP
192:2/19/GNdA6Mb8D0vI65vt0wsWAbsYXZY8stYcF62aKc03KY:+1oMbLDh6X7ZYptYcF65Kc03K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b28cccafdf6344503b2f5288aeef7a5_JaffaCakes118
Files
-
2b28cccafdf6344503b2f5288aeef7a5_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ