C:\Documents and Settings\pc\Desktop\Clean.pdb
Static task
static1
Behavioral task
behavioral1
Sample
1c95c998ffe2d17b8af8a9e1c20e5ad6_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1c95c998ffe2d17b8af8a9e1c20e5ad6_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1c95c998ffe2d17b8af8a9e1c20e5ad6_JaffaCakes118
-
Size
257KB
-
MD5
1c95c998ffe2d17b8af8a9e1c20e5ad6
-
SHA1
d399c236967eeef7df41b01e194b8b405d232c80
-
SHA256
c7f752f2f3a35737e393c929ab0dc7361945cce5a9850cd6c1da0b2e709e264c
-
SHA512
97021c40695a936116fba683e3ef0efc58a6535ef0c575196f651c92c8c4ea9617b7a2a0179f079853c4f388b1ece1bc15c18fb33f6ceb553bcbf3d19d97db87
-
SSDEEP
3072:5EaD4f9i5ZIQbMSfRsrZP6QdvlYy3wF68Dulkste9zte904rH49FZ0MGpmxIowrp:qG412/3MdPxg9204rHkGo2vdT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1c95c998ffe2d17b8af8a9e1c20e5ad6_JaffaCakes118
Files
-
1c95c998ffe2d17b8af8a9e1c20e5ad6_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.rsrc Size: 112KB - Virtual size: 111KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ