c:\xampp\htdocs\crypting\AOhE7G9GPVFS30Ws\ETz9X3EaOtKezCZy.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2f9f26166bb456942e79654907de7348_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2f9f26166bb456942e79654907de7348_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2f9f26166bb456942e79654907de7348_JaffaCakes118
-
Size
662KB
-
MD5
2f9f26166bb456942e79654907de7348
-
SHA1
566d979808725946b4f49afa65a5acb7687710f1
-
SHA256
0ecddc255ca3517a912462157180e31ac28f0623bfd6cf7ecb83d2f8deba3a8b
-
SHA512
9da9613744d624a4b3173ed1f585f652053fbd5a996098a87f9ab3c9d1a155e061eef072f1c2a0c4ea8b3be5cb28f69dd4527bd07ad955b7b6338790c19167b5
-
SSDEEP
3072:HVx1gIFYylLCtuNA86S+3wO0uOxh1AUfbMNrM9QnyU0Vqavk22qcpkBvjiaO8Ae4:H31gcNDDpunyUb/pWjiAJRy9Nf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 2f9f26166bb456942e79654907de7348_JaffaCakes118
Files
-
2f9f26166bb456942e79654907de7348_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 393KB - Virtual size: 393KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 168KB - Virtual size: 167KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ