c:\xampp\htdocs\crypting\tBsT7pOBwCx7gWXU\sAWXHgPI3ds9999L.pdb
Static task
static1
Behavioral task
behavioral1
Sample
8eeb73425480a7de79f7db7b76b51eb3_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
8eeb73425480a7de79f7db7b76b51eb3_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
8eeb73425480a7de79f7db7b76b51eb3_JaffaCakes118
-
Size
556KB
-
MD5
8eeb73425480a7de79f7db7b76b51eb3
-
SHA1
02e0c5d0270b06ebcda545301b21921a93bc3ea5
-
SHA256
f9ac3066d1d7b3f72a65d8940724c360828b66353a2aa5497136d87d404a2983
-
SHA512
f2016a484531faca5959c0b95c208f63ad60b864934e9512440fe1c712dfd9c36bffece60b18e4fa9fe3cd1d73952b8d09e998637c898695877d806c19b0971b
-
SSDEEP
12288:cNZ8FSO62Ri6o+vMRjY1JcIWMtyYYgbHsrlrS/c:qdZgcIwS/c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8eeb73425480a7de79f7db7b76b51eb3_JaffaCakes118
Files
-
8eeb73425480a7de79f7db7b76b51eb3_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 395KB - Virtual size: 395KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 160KB - Virtual size: 159KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ