C:\Documents and Settings\محمود\سطح المكتب\Stubvvvvvvvv.pdb
Static task
static1
Behavioral task
behavioral1
Sample
16ec6a990eda527f9d46817a249e7444_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
16ec6a990eda527f9d46817a249e7444_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
16ec6a990eda527f9d46817a249e7444_JaffaCakes118
-
Size
157KB
-
MD5
16ec6a990eda527f9d46817a249e7444
-
SHA1
42af11c22d7e96c3051b96c57dd2e5b5890042c2
-
SHA256
da94296e8f8f5ea3a92b1db5377eaa55a9cbf993211c048eba80ff5e57ba073c
-
SHA512
5e87079a5dffe8065725bfb2a933cfad040cf97fa82bdb20f8a83e26652fb49b59404049625c84c6ff00e0d69835fa53dad59aacc99f60fd7c03224b37a41729
-
SSDEEP
3072:XCkNwXzuoLNuqo6MuRTGsDph0sK6W5cPmocDmvP:yKKLNu+MKisDPI6sKP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16ec6a990eda527f9d46817a249e7444_JaffaCakes118
Files
-
16ec6a990eda527f9d46817a249e7444_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.rsrc Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 103KB - Virtual size: 102KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
eloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ