C:\Users\Vivien\Desktop\Stub\Stub\obj\Release\MicrosoftUpdate.pdb
Static task
static1
Behavioral task
behavioral1
Sample
25f32242ef27e6bc523afcf3d43f7583_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
25f32242ef27e6bc523afcf3d43f7583_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
25f32242ef27e6bc523afcf3d43f7583_JaffaCakes118
-
Size
863KB
-
MD5
25f32242ef27e6bc523afcf3d43f7583
-
SHA1
b8521de326407057483d89b6f43de1b3ec6da073
-
SHA256
3e4ff4d39679523f0935834ebc668a1061e9f693b83ac961d9691b4343c64c5b
-
SHA512
9b42f8554fe70415027cea4ca75e33f18ff94ffcdf60a8dce66399044d2157cf83fc1c9b8e1f1a6233b527039918d6c599813b6b2c87fcf3aad532cbb7c2be9d
-
SSDEEP
12288:ytkuqpNlpOTdAHTMqZ7dTPlhqxYtW6QAe13P0fVC+ZbYCvZASSQYKN640Kd:ekuquTdAHPTSY0keZMHZXtYOd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25f32242ef27e6bc523afcf3d43f7583_JaffaCakes118
Files
-
25f32242ef27e6bc523afcf3d43f7583_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 205KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ