c:\Users\Dr-West\Desktop\?????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????\?????????????????????????????????????????????????????????????????????????????
Static task
static1
Behavioral task
behavioral1
Sample
3194ed0d514641f0d558390f85e76c16_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
3194ed0d514641f0d558390f85e76c16_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
3194ed0d514641f0d558390f85e76c16_JaffaCakes118
-
Size
100KB
-
MD5
3194ed0d514641f0d558390f85e76c16
-
SHA1
e2080d667a59b94d454b612efa0ddfc3bb0d7bad
-
SHA256
54ee8333420a18b40bf7575699880a9e45cea56c1bb247c14f2e324b2745747f
-
SHA512
932710f02c6ccbe6c29954f59ae7bd9427bb853636c061c03cf4999de1031e072aa5af7e0478dec17c4878e4495f5edb7d6d7a7fed5498331d4e0239dc850072
-
SSDEEP
1536:xyLagOHmxDwWQdicLXiIRysPHLF4rdV/wa1OfpH8jns9cOoEFjgb8Kr:c2gxx8Whcj/AOrF6dIHAs9noEJgbFr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3194ed0d514641f0d558390f85e76c16_JaffaCakes118
Files
-
3194ed0d514641f0d558390f85e76c16_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 94KB - Virtual size: 94KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ