C:\Users\Pat\AppData\Local\Temporary Projects\WindowsApplication1\obj\Debug\WindowsApplication1.pdb
Static task
static1
Behavioral task
behavioral1
Sample
0bca8eefde6c2b9490619820f0a2c102_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0bca8eefde6c2b9490619820f0a2c102_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
0bca8eefde6c2b9490619820f0a2c102_JaffaCakes118
-
Size
20KB
-
MD5
0bca8eefde6c2b9490619820f0a2c102
-
SHA1
d3a12ced4a5e4e7bf20519534f5e175b2301a478
-
SHA256
d2d2e5885c48f37b7cbe44e31160b496c252e1128b668f85910e0a6fab4e9939
-
SHA512
e65be2e2f7e59fa93bf1025e30fddcdb0296574ac40512e85428e88d521bef5039428a7f9e33c7691dcb8d275ce239aff60dc4a381f410c64966f01a4de5165e
-
SSDEEP
384:62f53zZCM/aC3/3JKv9BsWZyJL724jcPlj1+dNOd253FPqcQGZWnF:62fpPJKv/ABcPZyJ2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0bca8eefde6c2b9490619820f0a2c102_JaffaCakes118
Files
-
0bca8eefde6c2b9490619820f0a2c102_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 152B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ