C:\Documents and Settings\sayd seka\Desktop\tools\tools\kigen.pdb
Static task
static1
Behavioral task
behavioral1
Sample
753d8951f421047be9cd52b0bacedb15_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
753d8951f421047be9cd52b0bacedb15_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
753d8951f421047be9cd52b0bacedb15_JaffaCakes118
-
Size
276KB
-
MD5
753d8951f421047be9cd52b0bacedb15
-
SHA1
cce8b2b6dfe8213a22e0bb7308badbbc8bc53900
-
SHA256
d600edfbef7f01396881c87d72e5083a82d577125ac5bbfba90f6ad499a70b7f
-
SHA512
d6ea824bd13a019075519b91528fdbeeafd2b5f5471a00d1eded63b06f842aaae98e5d00518de51954e548f277991731be66a414e56c8c826682c1ae3d5a3260
-
SSDEEP
3072:J27jjWXgQJGF+jW1RwfKpDn6bm7CquxhYeMop9StJf8YR14R0zsiTA/iPX8DsUXy:w7PWdI76ypDnM/Dxh71mkDs1dT0CB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 753d8951f421047be9cd52b0bacedb15_JaffaCakes118
Files
-
753d8951f421047be9cd52b0bacedb15_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.rsrc Size: 112KB - Virtual size: 111KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 163KB - Virtual size: 162KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ