E:\project\se\branches\5.3_taobao\webkit\out\Release\SogouExplorer.exe.pdb
Static task
static1
Behavioral task
behavioral1
Sample
39eebe5076606cdf9a85f144287daa91_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
39eebe5076606cdf9a85f144287daa91_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
39eebe5076606cdf9a85f144287daa91_JaffaCakes118
-
Size
700KB
-
MD5
39eebe5076606cdf9a85f144287daa91
-
SHA1
7457f5c56cdc0dca25aba194d2fda25a07adf6cb
-
SHA256
0664c7e106d2a8f52c1eab2ad4df0e522253f5a5248ee28b14f74785bd141891
-
SHA512
5ad932d60973b50678408d8c6fe984903f38f4daf1d5b50ce752a9e32e36bf2058cbd3afeddcce023bf3ecfbd7f9f8e00ec31ff6c2dc1da2861d90dfed0b5163
-
SSDEEP
12288:zbLmhLJCq3gkGwc1Jw7hPIOGf3ulzojldEyCaLiXfcAGGnwkL6mdjHBMl/ECzDAo:zHIaLfuGjlhCaLMnw66mdS/JzDAxO4y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39eebe5076606cdf9a85f144287daa91_JaffaCakes118
Files
-
39eebe5076606cdf9a85f144287daa91_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Exports
Exports
IsSandboxedProcess
Sections
.text Size: 305KB - Virtual size: 305KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 124KB - Virtual size: 123KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 6KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 2B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.yvs Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE