f:\dd\vsproject\xmake\XMakeCommandLine\objr\amd64\MSBuild.pdb
Static task
static1
Behavioral task
behavioral1
Sample
0cb05f8f99c5ff8bf58e476b87184e82_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0cb05f8f99c5ff8bf58e476b87184e82_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0cb05f8f99c5ff8bf58e476b87184e82_JaffaCakes118
-
Size
1.1MB
-
MD5
0cb05f8f99c5ff8bf58e476b87184e82
-
SHA1
734d6d79142fecd2595345ab6aa0c578955811d9
-
SHA256
776a690c420c3445c0a543ad81083884a2f3fedb08a22c1cd8d3ef98c29ae063
-
SHA512
6e2ce1330f0b9157ae48b0d55abe365666139931f38ce0d6c41ffd8b97675aed1d761120a2d549e4fa0e5e08a3f3094d3eee2cb729e380dc6f11fc0a4921527e
-
SSDEEP
12288:0wsz2kM2GAu1mt0LDwrepBXRlDkpT9zmVIoGxZgHFRwijaaUadIJpX:0j2kM84pHlYjboGxZqwijaahIJpX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0cb05f8f99c5ff8bf58e476b87184e82_JaffaCakes118
Files
-
0cb05f8f99c5ff8bf58e476b87184e82_JaffaCakes118.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Sections
.text Size: 60KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ