C:\Users\Sale\Documents\Visual Studio 2015\Projects\sfvip player\SFVipUpdater\obj\x64\Debug\Updater.pdb
Static task
static1
Behavioral task
behavioral1
Sample
a06e50d22bfa951dffaccbb1935df86c_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
a06e50d22bfa951dffaccbb1935df86c_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
a06e50d22bfa951dffaccbb1935df86c_JaffaCakes118
-
Size
214KB
-
MD5
a06e50d22bfa951dffaccbb1935df86c
-
SHA1
8851fa933c206b4f0cccaf388fde854eaed522d3
-
SHA256
a8dc055f1ec36fa9a9cb51c82b92bb406143c97e9cf2550a3c314c27b6f17a0c
-
SHA512
bd55b950909e147978da877e2661f9a3c8d6622f8fd95a835a497a0300be50eaf8ebc64506dd3ddf940044ed73738c7ccde6abf4fe24cb00535403fcff75143e
-
SSDEEP
1536:ZYJp7/BPZIw0xeKoKnS97H2FUAdRno04eKoKnS97H2DeA8RMo0y:Z4xfCToKe7WSA7h4ToKe7WSAphy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a06e50d22bfa951dffaccbb1935df86c_JaffaCakes118
Files
-
a06e50d22bfa951dffaccbb1935df86c_JaffaCakes118.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Sections
.text Size: 126KB - Virtual size: 126KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 87KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ