V:\TbAnzUyrcw\EqIweyjtlp\tqiwwquY\pagenmf\upbhesazcR.pdb
Static task
static1
Behavioral task
behavioral1
Sample
6958860b87f8c4b69c26f8caf2fb801c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6958860b87f8c4b69c26f8caf2fb801c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6958860b87f8c4b69c26f8caf2fb801c_JaffaCakes118
-
Size
169KB
-
MD5
6958860b87f8c4b69c26f8caf2fb801c
-
SHA1
5dbefeb05130752c009db00fea2634fddb9b8f43
-
SHA256
b2ad01e0f1c6aaa06e4e40462be83cc971e579db77224e173e6f646aaf35c223
-
SHA512
87e1efdf45e17c452be26401c1aadb212952db071dd30008430b25d5a2825cd0aecea918e6b9026ca1248cb13468f8070e38336a1d3de13a85f48d35925e768f
-
SSDEEP
3072:62qJO3WO5veLWeq0KlK5HVQ4v19GPNTtreJqtxF1Y5nJgnCH1xF16O5sLcrAAxa0:64m6veLnR1j+PNxreYtXo2mj6s2crRa0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6958860b87f8c4b69c26f8caf2fb801c_JaffaCakes118
Files
-
6958860b87f8c4b69c26f8caf2fb801c_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Exports
Exports
?SuperFunctionCall@@YGKXZ
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dbg01 Size: - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ