C:\Documents and Settings\LIBYA\Desktop\WindowsApplication12\WindowsApplication1\obj\x86\Release\LIBYAN.pdb
Static task
static1
Behavioral task
behavioral1
Sample
180d90963d8fec195d6b272f4d35feae_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
180d90963d8fec195d6b272f4d35feae_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
180d90963d8fec195d6b272f4d35feae_JaffaCakes118
-
Size
68KB
-
MD5
180d90963d8fec195d6b272f4d35feae
-
SHA1
447e1f250c4e6ab4a4f2310bf591d68f951bc511
-
SHA256
2aa8be286abbeb8c282bcb6e90c9548e28845c731b702a474b6fd97e0ecca89d
-
SHA512
7e85600ab7991a05f75cecfdc379e14738774914f12c7ec4ea00c3ce4608101b25ef0396c1789e2f33a02cbcb706a59f99b64b8082204c9ff816f092a5ff693c
-
SSDEEP
768:bCVWAbFsRrbPqXcrF7ysfnFhSxu3CD168dDacm4G8ROXiHixI81hjH4+6RPGUzbR:uA2WccpRnvd3m/uFaHQI8194lPfOk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 180d90963d8fec195d6b272f4d35feae_JaffaCakes118
Files
-
180d90963d8fec195d6b272f4d35feae_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 160B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ