C:\Users\ArTiN\Desktop\duhoki.pdb
Static task
static1
Behavioral task
behavioral1
Sample
5e7e2e2f2e9df8a26f0f8751dd5908b3_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5e7e2e2f2e9df8a26f0f8751dd5908b3_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5e7e2e2f2e9df8a26f0f8751dd5908b3_JaffaCakes118
-
Size
193KB
-
MD5
5e7e2e2f2e9df8a26f0f8751dd5908b3
-
SHA1
8d3816d1752f82a20f2d24a3c3a69cc0219dc553
-
SHA256
8d10a8991010710c96fd1b7e914fcb6d64c67349e94c911eb790fdb74a59e062
-
SHA512
fafc24aa12a4ffbbd4654269c33ee8522902c5da025fdad5bb0f92e0ab5a3ed6d09d920b8345ca529b9306f319414722ef86b3ca81f64ae6dc33ed83f5f7a4d3
-
SSDEEP
3072:nvo4BKRd+XQeKDCSz5BjPnvFsZu5Oqrts2R6btAzTpTgZEADOB:nv1BxXeGugqi2Qyzty
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e7e2e2f2e9df8a26f0f8751dd5908b3_JaffaCakes118
Files
-
5e7e2e2f2e9df8a26f0f8751dd5908b3_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.rsrc Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 154KB - Virtual size: 153KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ