C:\Users\JodPc\Desktop\NC_2017-07-27_306_Thu01\obj\Debug\nano.pdb
Static task
static1
Behavioral task
behavioral1
Sample
48159a39e517694cd35dec553de4ee04_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
48159a39e517694cd35dec553de4ee04_JaffaCakes118
-
Size
835KB
-
MD5
48159a39e517694cd35dec553de4ee04
-
SHA1
e1391e19b7a828a871c89cf9f0758b5ee82fc5ac
-
SHA256
5cb8b4b4511802763cb4203ee9af57b798cf44d1b921925c1980921012800c0c
-
SHA512
5edffecbe8a0fdc5757ca9a3f9bbc28a97b3f2905619ab1e65da45630522ee7d97752908a8c755d53200facf8ea5d01f1773a5b4fb803e8eb01c6af519af1161
-
SSDEEP
12288:u2sSi0F6i5OFpzx1Bw1regn1cBMBN0B/DXH2qqewGOqzDAMOnYyniZYU:uci0VOFpzx3UBgD3hqe/OqzsnvG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48159a39e517694cd35dec553de4ee04_JaffaCakes118
Files
-
48159a39e517694cd35dec553de4ee04_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 832KB - Virtual size: 831KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ