C:\Documents and Settings\Rom\Bureau\Crypter Private\Infinity\Infinity\obj\x86\Release\BADIJOU.pdb
Static task
static1
Behavioral task
behavioral1
Sample
1b64853e1b40feb15c2b03b5fb4556a8_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1b64853e1b40feb15c2b03b5fb4556a8_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
1b64853e1b40feb15c2b03b5fb4556a8_JaffaCakes118
-
Size
252KB
-
MD5
1b64853e1b40feb15c2b03b5fb4556a8
-
SHA1
4203846254de06b42aa325cd31318e08e5bc8d3d
-
SHA256
cc1667717df1938fec405000608b0ec4a0349cdc04a05437154c79dde474feff
-
SHA512
51d92587b676fb59893684fa9419a289d3bcf25c7f944968144ecfb726690743ddfe669cb0acdc9081c13df34ea60ddf0254d6c91c356f85aaeec2b1c96efcdc
-
SSDEEP
3072:4Rj4TCTqe1DC1X0IbJ2IJKys9d0VDIKlRFAkx8TDJ/i80Sb47ortFal2GDqpj2oQ:0jnD7+J2+Fs9d0V7R6nIG6qoo5oeV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b64853e1b40feb15c2b03b5fb4556a8_JaffaCakes118
Files
-
1b64853e1b40feb15c2b03b5fb4556a8_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 248KB - Virtual size: 248KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ