c:\SHPATH\Release\SHPATH.pdb
Static task
static1
Behavioral task
behavioral1
Sample
5bc59a25ca4818268f11636042a0070f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5bc59a25ca4818268f11636042a0070f_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
5bc59a25ca4818268f11636042a0070f_JaffaCakes118
-
Size
1KB
-
MD5
5bc59a25ca4818268f11636042a0070f
-
SHA1
5a9240c4974163f42ca79b597f921ac64bd04f9a
-
SHA256
975f122ab42d75f886479eecf92307c434f8f5a50e54261af9ebb88b19402c29
-
SHA512
0662569dfbf29978a59c35af6443b0b8fe3dded14308dde930ab9c81cf6745b2a11068a5510aa6caa5b2191e3f67a203dd3409909c813ca90471b9aaf8c56149
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5bc59a25ca4818268f11636042a0070f_JaffaCakes118
Files
-
5bc59a25ca4818268f11636042a0070f_JaffaCakes118.exe windows:4 windows x86 arch:x86
e9b92dcb170a57c271f9bd07d51d1f82
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
lstrlenA
GetStdHandle
GetShortPathNameA
ExitProcess
WriteFile
advapi32
RegEnumValueA
RegCloseKey
RegOpenKeyA
Sections
.data Size: 1024B - Virtual size: 962B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE