C:\Users\Administrator\Documents\Visual Studio 2008\Projects\e.m.p.t.y\e.m.p.t.y\obj\Release\X2adsVeGF.pdb
Static task
static1
Behavioral task
behavioral1
Sample
310048b5d6d47fbea5cc0e9c4c2a828e_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
310048b5d6d47fbea5cc0e9c4c2a828e_JaffaCakes118
-
Size
340KB
-
MD5
310048b5d6d47fbea5cc0e9c4c2a828e
-
SHA1
2d7bb0cd9a8d3b35dfbefd07786a6d78494890ed
-
SHA256
e9a24a8ae405a24f80ae42225449eb3f9b53be8a9b043173f1c6d8d9becfdadd
-
SHA512
a5fdf171593fca27361642c28ab30f8a766c1ecaee21ff1927ccf5ee8288c4dbb640147d64d55155bd3f6e7cfce4262101c9af2ea2e60c20d0bc7ef617a906af
-
SSDEEP
6144:wMRoNEQjQRYQWMJTKRH2xhh0zEkZE8JI9rsYoaksxx+u1MN:9ONEQFQWaTLboZ+3MN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 310048b5d6d47fbea5cc0e9c4c2a828e_JaffaCakes118
Files
-
310048b5d6d47fbea5cc0e9c4c2a828e_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 159B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 292KB - Virtual size: 291KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ