C:\Documents and Settings\Администратор.PRIVE-8DB3B7347\Мои документы\Downloads\_ZipArchiveTV141\_ZipArchive141\res\temp\packed.pdb
Static task
static1
Behavioral task
behavioral1
Sample
0f2f5b26d1a4ae958ce59f0b7bde6435_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0f2f5b26d1a4ae958ce59f0b7bde6435_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0f2f5b26d1a4ae958ce59f0b7bde6435_JaffaCakes118
-
Size
6.3MB
-
MD5
0f2f5b26d1a4ae958ce59f0b7bde6435
-
SHA1
bc5a9bd3b88fc2bf2121205c97608fbac6ebe78d
-
SHA256
c849ffb813985190c8a02bf55ee7154fb6ba3cd0a61b9637e2fc5d59bc8de80c
-
SHA512
d77a7c4f5eb3004b814f28e8eae84f38b68b83050b9dc9a0d6291da162dbce12c2185d55c2d7ffd40e5cb4f83cf3a222b0686bb9b6b284bec3d5857c5ff4e02d
-
SSDEEP
98304:9qyxGNACutJE4LnWadDonJB7fW5GQ0YHowTS+4R9NargR+tx/lG9EI7vIta2iuJ:UyxHCugYWadDo7WkGHow0nQxwT7A0cJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f2f5b26d1a4ae958ce59f0b7bde6435_JaffaCakes118
Files
-
0f2f5b26d1a4ae958ce59f0b7bde6435_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 506KB - Virtual size: 506KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ