c:\asss\qxvege\nef\xamsj\zzzxjezeo\npes.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2f1062a385c1d14ca641245449f36232_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2f1062a385c1d14ca641245449f36232_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2f1062a385c1d14ca641245449f36232_JaffaCakes118
-
Size
289KB
-
MD5
2f1062a385c1d14ca641245449f36232
-
SHA1
571a3eda8b564dae8b06b1f53c86657995b1fcef
-
SHA256
d6e818cb10b6b89f3bd9ffa6c73ded905094bf8a0af4b1407411f3410892f7f1
-
SHA512
4c6636ec4c6d79eb6119b71957d3597566cf89b4cfaebfb9ea32db98d0098535278113802fe92f650b606593e674b7a783f8aee1713b00ccaec08fcec8f23a92
-
SSDEEP
6144:+fyEPY7T2g2vGPzrKAUJ6lLSF7vaIG9VVUpMRYgypLB89PnR/:gyEPY7/nW69ShvajVVIMRYXpLB895
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f1062a385c1d14ca641245449f36232_JaffaCakes118
Files
-
2f1062a385c1d14ca641245449f36232_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Sections
.text Size: 109KB - Virtual size: 109KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 263KB - Virtual size: 262KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 79KB - Virtual size: 93KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 77KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ