c:\xampp\htdocs\crypting\fc0Qpbv0JyEkALy1\OMNQK4uZeBeaCS5C.pdb
Static task
static1
Behavioral task
behavioral1
Sample
44e5e8b3ea5ecc5930212ac64f1e9aeb_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
44e5e8b3ea5ecc5930212ac64f1e9aeb_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
44e5e8b3ea5ecc5930212ac64f1e9aeb_JaffaCakes118
-
Size
2.2MB
-
MD5
44e5e8b3ea5ecc5930212ac64f1e9aeb
-
SHA1
3abf6720308c021a11086a9cf1e7a92d5a5c2e5f
-
SHA256
56f9f3dcdedea081034d522496194b1e8d5fc4034dbc07629c1d701a8a98dd9d
-
SHA512
576c94fbbeba6b7d632eec5253f693f282de2ae723f7af78160f2cf80d2757394287457ce518e9addc64f6dbfe4b6b22ecc64bec91c4eaae4f393b6b3c91963b
-
SSDEEP
24576:f+o16BY9cSO93WaGzXN5andSBe3n7W6Z8dfMue7+Y/LQp4E8gqybujugnrrn/5PC:fLk3BBRXV8Opcpl43tmgmu8fGP1oCgqg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 44e5e8b3ea5ecc5930212ac64f1e9aeb_JaffaCakes118
Files
-
44e5e8b3ea5ecc5930212ac64f1e9aeb_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 161KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ