d:\c,c++\c++\safe\Release\safe.pdb
Static task
static1
Behavioral task
behavioral1
Sample
08842997688601dc5a77ae82487a7204_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
08842997688601dc5a77ae82487a7204_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
08842997688601dc5a77ae82487a7204_JaffaCakes118
-
Size
56KB
-
MD5
08842997688601dc5a77ae82487a7204
-
SHA1
318c403a65846416c1490fdb08e95b375c7f3e08
-
SHA256
93f3a7238838f4855a5aa034561ef2cc8d8a5b9f47a2b44a6e99f795f450093f
-
SHA512
aa3e5d72535f52d199f41226148241a7aec2cdb3326b7264020b54843df3a230d17e561f0f084310f89222b05ca1be301aeabfe1dc57553a869bc69fe9f05f38
-
SSDEEP
384:JccMql/unLI53EldQRrN+vQdML4N+ngsx36qAyLLq45e/+Pje/KLe/Le/tfF1m:JCqdunLIydiuKMLGOlaxfvq5n
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08842997688601dc5a77ae82487a7204_JaffaCakes118
Files
-
08842997688601dc5a77ae82487a7204_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Sections
PAGE Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ