qWjQdGSimiYarbaQ.pdb
Static task
static1
Behavioral task
behavioral1
Sample
36b4cb08211b0428ac44209ff4860b41_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
36b4cb08211b0428ac44209ff4860b41_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
36b4cb08211b0428ac44209ff4860b41_JaffaCakes118
-
Size
677KB
-
MD5
36b4cb08211b0428ac44209ff4860b41
-
SHA1
0336cf962ca7bbe4e8ceb5fd7870c8e51a04bb75
-
SHA256
1b3190bd9170d8a74c558e674de5d62bb868c4a6a4187a03055534d4e1f6834a
-
SHA512
3005ac93de4645536757ef16a0b18acfe6d05fb2c9f21ea0903ee873cb81db9db65c60b486fc9d2bb128d57a1dd3b77839f46b2a4c1ed637f32a746e7df2904f
-
SSDEEP
12288:6PzEdQf8PKZuysOiaf8ubxUT66bbj3WwhFNHuRPMrxaHdrv9dDN6:2SQfVuyse3tUTrjGwoPAIdR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36b4cb08211b0428ac44209ff4860b41_JaffaCakes118
Files
-
36b4cb08211b0428ac44209ff4860b41_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 607KB - Virtual size: 607KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ