C:\Documents and Settings\محمد\سطح المكتب\astvsar.pdb
Static task
static1
Behavioral task
behavioral1
Sample
152c29c1337c052868ba3d0fdd4b3753_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
152c29c1337c052868ba3d0fdd4b3753_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
152c29c1337c052868ba3d0fdd4b3753_JaffaCakes118
-
Size
262KB
-
MD5
152c29c1337c052868ba3d0fdd4b3753
-
SHA1
9d78920da040fdb0b95d81b153b10ba310236ede
-
SHA256
e439ec830f8868aef15cdd48abdf61cf16905bfc7ca5cbf2d29439c1878285cf
-
SHA512
bd86079f500f90837428caf0551e2e3abeb1024af5d8851b66b15d5996585e46eaf6355f84561c5032d733f71f7498f0c37e7623d5a92edc473277062a96d7dc
-
SSDEEP
3072:67600AOC5pBZaBKyPW8jw5G+0koWxOo6vCSz5B/KOVAaFXx2HimsGVVd+7Z2Caav:6WIfKrPWWwo+0ZB6qJkVdw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 152c29c1337c052868ba3d0fdd4b3753_JaffaCakes118
Files
-
152c29c1337c052868ba3d0fdd4b3753_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.rsrc Size: 107KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 154KB - Virtual size: 153KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ