E:\rachid_madridi\xp\rachid facebook\bifrost\a ----\Obfuscated\Rachid Madridi.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2de524da1c710d5a4ef163e70bb967e6_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2de524da1c710d5a4ef163e70bb967e6_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2de524da1c710d5a4ef163e70bb967e6_JaffaCakes118
-
Size
495KB
-
MD5
2de524da1c710d5a4ef163e70bb967e6
-
SHA1
22c13d33cf2eac0d446e8f1b1269ace549bfc87a
-
SHA256
ee11e2730094852e7d8ab1b53ab48fee8f2baef74d8b8e80fe86dde1b5e186b7
-
SHA512
182afa4ecc2ff59d4b6420b8feb0ca6acf693bd521ae5366d196bb9fcc5e9d22a3ecf4ce89b9273ea77677a8a5f57f5100105af4186f062f8c5351f10591aec6
-
SSDEEP
12288:c7E99HzIfpLp8YzaK2xZmz3mJ6kgLkgXs52UtJQ75:595zIfpLp8YzrGm0bgLkui2UtJa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2de524da1c710d5a4ef163e70bb967e6_JaffaCakes118
Files
-
2de524da1c710d5a4ef163e70bb967e6_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 450KB - Virtual size: 450KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE