E:\HD_Audio\VS2005\RtVOsdService\RtVOsdService\obj\Release\RtVOsdService.pdb
Static task
static1
Behavioral task
behavioral1
Sample
36b1f102980c741f9466e20146513f54_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
36b1f102980c741f9466e20146513f54_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
36b1f102980c741f9466e20146513f54_JaffaCakes118
-
Size
308KB
-
MD5
36b1f102980c741f9466e20146513f54
-
SHA1
84ca0ceab5068450d0d93eb056cae620eef5fb1b
-
SHA256
0dd9005df2d3598d25ea437d53ebac57bc88afc6303fe27efb8588d2d80e8821
-
SHA512
e322d3f19509134f22e3e60b96bf6498cee002e8007a8324bc9ceea00e59fd775953d112baa1639f288dd15aa2ae68c9c26de48580de7125623054cecd4f6295
-
SSDEEP
384:66+eBsISwvQWhUWhz66666Doar5WWgoJcjJqz0DDGOB:6CsIP/h1hz66666nwlDB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36b1f102980c741f9466e20146513f54_JaffaCakes118
Files
-
36b1f102980c741f9466e20146513f54_JaffaCakes118.exe windows:5 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 284KB - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ