f:\dd\vsproject\xmake\XMakeCommandLine\objr\amd64\MSBuild.pdb
Static task
static1
Behavioral task
behavioral1
Sample
749cf4eb854bc589101f15bcb3b9e820_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
749cf4eb854bc589101f15bcb3b9e820_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
749cf4eb854bc589101f15bcb3b9e820_JaffaCakes118
-
Size
92KB
-
MD5
749cf4eb854bc589101f15bcb3b9e820
-
SHA1
00a5cc983f3b3d5889d16758bd8542af8b6b49dd
-
SHA256
a3d0f51fcf455dbdb766f9f8994140da762dd1d8c4d139c748fce970ddc4991f
-
SHA512
6328e3ca56d9641cd35a0ddebdff1d5bc3cd7c1927534593ce05e64cc04568dfc6329d5845ce6601bdfb941216e1200d08aea28cfe4d238ab712797f4a077937
-
SSDEEP
1536:olGBu7jjP9/tMDOzJtjVO3GOmcNjt7Ra6FHeBQGDsn:HW/tMDO9tpuOcFRU6wQGD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 749cf4eb854bc589101f15bcb3b9e820_JaffaCakes118
Files
-
749cf4eb854bc589101f15bcb3b9e820_JaffaCakes118.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Sections
.text Size: 48KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE