C:\Documents and Settings\XPPRESP3\Desktop\cy1.pdb
Static task
static1
Behavioral task
behavioral1
Sample
658b91f22382e9440488b2ed2a8fc612_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
658b91f22382e9440488b2ed2a8fc612_JaffaCakes118
-
Size
496KB
-
MD5
658b91f22382e9440488b2ed2a8fc612
-
SHA1
a070f316cec996adcef806b27fa7288ba0e18235
-
SHA256
f9c1a1782f65153bc4ffcc508af3b1db4484617c48878899aa62cdd1fbaf096c
-
SHA512
a606d2221878efd709fc4053296a163095933c48020e75aaf9a4acb356d307610919164792d67824caac88ccf45c3d6f8b8bf642ec651b0f78af868a0854b0ab
-
SSDEEP
12288:AwB9CW3ih8yrZGaiJLgk0EWHqlR2/hVPz:AMCW3i/ZlUEk0Ehk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 658b91f22382e9440488b2ed2a8fc612_JaffaCakes118
Files
-
658b91f22382e9440488b2ed2a8fc612_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.rsrc Size: 374KB - Virtual size: 374KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ